Oopencast

Products

Exploited and recent CVEs

• CVE-2026-77615 High 8.7 Paella Player: Stored XSS via caption cue text 0.6%
• CVE-2026-77614 High 8.8 Opencast: Session fixation in login enables account takeover via crafted link 0.5%
• CVE-2025-61906 Low 2.3 Opencast's editor accidentally publishes videos/overwrites publications #1626 0.3%
• CVE-2025-61788 Medium 5.1 Opencast Paella Player 7 vulnerable to Cross-Site-Scripting 0.2%
• CVE-2025-55202 Low 2.7 Opencast has a partial path traversal vulnerability in UI config 0.4%
• CVE-2025-54380 Medium 6.5 Opencast still publishes global system account credentials 0.4%
• CVE-2024-52797 Medium 6.5 Searching Opencast may cause a denial of service 0.9%
• CVE-2022-41965 Medium 5.7 Opencast Authenticated OpenRedirect Vulnerability 0.4%
• CVE-2022-29237 Medium 5.4 Limited Authentication Bypass for Media Files in Opencast 0.6%
• CVE-2021-43821 Critical 9.9 Files Accessible to External Parties in Opencast 2.0%
• CVE-2021-43807 High 7.5 HTTP Method Spoofing in Opencast 1.5%
• CVE-2021-32623 High 8.1 Opencast vulnerable to billion laughs attack (XML bomb) 1.3%
• CVE-2021-21318 Medium 5.4 Removing access may not effect published series 0.7%
• CVE-2020-26234 Medium 4.8 Disabled Hostname Verification in OpenCast 0.3%
• CVE-2020-5206 High 8.7 Authentication Bypass For Endpoints With Anonymous Access in OpenCast 1.3%
• CVE-2020-5231 Medium 4.8 Opencast users with ROLE_COURSE_ADMIN can create new users 0.6%
• CVE-2020-5230 High 7.7 Opencast uses unsafe identifiers 1.2%
• CVE-2020-5222 Medium 6.8 Hard-Coded Key Used For Remember-me Token in OpenCast 0.9%
• CVE-2020-5229 High 7.7 Opencast stores passwords using outdated MD5 hash algorithm 0.6%
• CVE-2020-5228 High 7.6 Opencast allows unauthorized public access via OAI-PMH 1.0%