Vulnerabilities in Apereo CAS 3.0