Nitron/django-cas-provider — Issue #7: Security issue in validate
Author: BarnabyShearer
Created: 2012-02-26 14:50:11+00:00
State: open

Fairly sure that 'validate' should check that the ticket and service parameters match. Currently if once service gets a service ticket, it can then provide that ticket to another service and impersonate the user.