EUVD-2026-72850
GHSA-55qv-ff37-vh3v
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Remote unauthenticated single-request bypass justifies AV:N/AC:L/PR:N/UI:N with C:H/I:H from account takeover; A:N because an auth bypass grants access, not inherent availability loss.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request.
AnalysisAI
Unauthenticated remote attackers can log into sso-master v1.0.0 without supplying a password by sending a single crafted POST request to the CAS /cas/login endpoint, gaining full application access with high confidentiality and integrity impact (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N; vendor-published base 9.8). No valid credentials, user interaction, or special client configuration are required, and the assessment notes no availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a reachable sso-master v1.0.0 deployment exposing the CAS /cas/login endpoint; the attacker sends a single crafted POST request to that endpoint to bypass password authentication - no valid credentials, no user interaction, and no special client-side configuration are needed per the CVSS vector (PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals conflict sharply. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch was identified at time of analysis: none of the supplied references (NVD, VulDB, EUVD, or the GitHub write-up) specify a fixed version, and patch data is absent rather than negative, so treat any fix as unconfirmed and verify upstream before assuming remediation exists. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, determine exposure: inventory all hosts and containers for sso-master v1.0.0 and confirm any instance serving the CAS /cas/login endpoint; where found, immediately block external and lateral access to /cas/login at the WAF, reverse proxy, or network ACL, and if the system is internet-facing, isolate it from production until mitigations are in place. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today