Apereo Opencast vulnerabilities

• apereo opencast Opencast's editor accidentally publishes videos/overwrites publications #1626 CVE-2025-61906 2.3 LowOctober 8, 2025
• apereo opencast Opencast Paella Player 7 vulnerable to Cross-Site-Scripting CVE-2025-61788 5.1 MediumOctober 8, 2025
• apereo opencast Opencast has a partial path traversal vulnerability in UI config CVE-2025-55202 Fix available 2.7 LowAugust 29, 2025
• apereo opencast Opencast still publishes global system account credentials CVE-2025-54380 Fix available 6.5 MediumJuly 25, 2025
• apereo opencast Searching Opencast may cause a denial of service CVE-2024-52797 Fix available 6.5 MediumNovember 20, 2024
• apereo opencast Opencast Authenticated OpenRedirect Vulnerability CVE-2022-41965 Fix available 5.7 MediumNovember 28, 2022
• apereo opencast Limited Authentication Bypass for Media Files in Opencast CVE-2022-29237 Fix available 5.4 MediumMay 24, 2022
• apereo opencast Opencast publishes global system account credentials CVE-2018-16153 Fix available 7.5 HighDecember 14, 2021
• apereo opencast Files Accessible to External Parties in Opencast CVE-2021-43821 Public exploitFix available 9.9 CriticalDecember 14, 2021
• apereo opencast HTTP Method Spoofing in Opencast CVE-2021-43807 Fix available 7.5 HighDecember 14, 2021
• apereo opencast Opencast vulnerable to billion laughs attack (XML bomb) CVE-2021-32623 Fix available 8.1 HighJune 15, 2021
• apereo opencast Removing access may not effect published series CVE-2021-21318 5.4 MediumFebruary 18, 2021
• apereo opencast Disabled Hostname Verification in OpenCast CVE-2020-26234 Fix available 4.8 MediumDecember 8, 2020
• apereo opencast Authentication Bypass For Endpoints With Anonymous Access in OpenCast CVE-2020-5206 Fix available 8.7 HighJanuary 30, 2020
• apereo opencast Opencast users with ROLE_COURSE_ADMIN can create new users CVE-2020-5231 Fix available 4.8 MediumJanuary 30, 2020
• apereo opencast Opencast uses unsafe identifiers CVE-2020-5230 Fix available 7.7 HighJanuary 30, 2020
• apereo opencast Hard-Coded Key Used For Remember-me Token in OpenCast CVE-2020-5222 Fix available 6.8 MediumJanuary 30, 2020
• apereo opencast Opencast stores passwords using outdated MD5 hash algorithm CVE-2020-5229 Fix available 7.7 HighJanuary 30, 2020
• apereo opencast Opencast allows unauthorized public access via OAI-PMH CVE-2020-5228 Fix available 7.6 HighJanuary 30, 2020
• apereo opencast Opencast has Incorrect Permission Assignment CVE-2017-1000221 Fix available 6.5 MediumNovember 17, 2017