Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.opencastproject:opencast-kernel

7 known vulnerabilities (2 high, 4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 2 high, 4 medium
Registry
Maven Central

Advisories 7

  • CVE-2025-54380Medium 6.5

    Opencast still publishes global system account credentials

    Affected: fixed in 17.6.

  • Opencast vulnerable to billion laughs attack (XML bomb)

    Affected: fixed in 9.6.

  • CVE-2020-26234Medium 4.8

    Disabled Hostname Verification in OpenCast

    Affected: fixed in 7.9; from 8.0, fixed in 8.9.

  • Authentication Bypass For Endpoints With Anonymous Access in OpenCast

    Affected: fixed in 7.6; from 8.0, fixed in 8.1.

  • CVE-2020-5231Medium 4.8

    Opencast users with ROLE_COURSE_ADMIN can create new users

    Affected: fixed in 7.6; from 8.0, fixed in 8.1.

  • CVE-2020-5222Medium 6.8

    Hard-Coded Key Used For Remember-me Token in OpenCast

    Affected: fixed in 7.6; from 8.0, fixed in 8.1.

  • In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will…

    Affected: fixed in 2.2.4.