Opencast RCE Vulnerability

ALTO 8.8CVE-2017-1000217 · GHSA-qwfv-5jwj-582h · Published 17/11/2017 · updated 17/06/2026

In breve

CVE-2017-1000217 è una vulnerabilità ALTO (CVSS 8.8) che riguarda org.opencastproject:base, opencast (opencast).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.4% delle vulnerabilità.
Correzione: aggiornare a 2.3.3 o successiva.

Package	Affected versions	Patched versions
org.opencastproject:base Maven	`< 2.3.3`	`2.3.3`
opencast opencast	`≤ 2.3.2`	No fix yet

Description

Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.

NVD description

Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.

References

nvd.nist.gov/vuln/detail/CVE-2017-1000217 · ADVISORY
opencast/opencast commit 2d42e42 · WEB
opencast/opencast commit fba2f35 · WEB
opencast/opencast · PACKAGE
groups.google.com/a/opencast.org/forum · WEB
groups.google.com/a/opencast.org/forum

Altre vulnerabilità di org.opencastproject:base

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free