Vulnerabilities in Apereo CAS 3.6.0