Vulnerabilities in Apereo CAS 3.5.2