Skip to content
OpenAdvisories

Package · Maven

org.opencastproject:opencast-common

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2018-16153

    Opencast publishes global system account credentials

    An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.

    org.opencastproject:opencast-common Maven
  • High 7.5
    CVE-2021-43807

    HTTP Method Spoofing in Opencast

    Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast versions prior to 9.10 allow HTTP method spoofing, allowing to change the assumed HTTP method via URL parameter. This allows attackers to turn HTTP GET requests into PUT req…

    opencast opencast org.opencastproject:opencast-common Maven