CVE-2022-41965
Medium
Description
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability allows attackers to redirect users to sites outside of one's Opencast install, potentially facilitating phishing attacks or other security issues. This issue is fixed in Opencast 12.5 and newer.
SeverityMedium
CVSS5.7
Exploit probability—
ProductApereo Opencast
PublishedNov 28, 2022
First seenNov 28, 2022
Weakness typeCWE-601Open redirect
How to fix
Update
- apereo opencast12.5 or later
- org.opencastproject:opencast-common12.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apereo opencast | v < 12.5 | 12.5 |
| org.opencastproject:opencast-commonMaven | v < 12.5 | 12.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.