[CRITICAL] Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability

PKSA-1jx6-8d22-3vrs CVE-2014-4172 GHSA-9fc5-q25c-r2wr

Affected package: jasig/phpcas

Affected version: <1.3.3

Reported by:
GitHub