CVE-2017-14141

HIGH 7.2CVE-2017-14141 · Published 19/09/2017 · updated 17/06/2026

In short

CVE-2017-14141 is a HIGH (CVSS 7.2) vulnerability affecting kaltura server (kaltura).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.7% of all vulnerabilities.
Fix: update to 13.2.0 or later.

Package	Affected versions	Patched versions
kaltura server kaltura	`< 13.2.0`	`13.2.0`

Description

The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.

References

securityfocus.com/bid/100976 · Third Party Advisory
kaltura/server commit 6a6d143 · Third Party Advisory
telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt · Exploit

More vulnerabilities in kaltura server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

kaltura server

kaltura

< 13.2.0

13.2.0

More vulnerabilities in kaltura server

See all →