CVE-2021-43807: Authentication Bypass by Spoofing

Opencast is an Open Source Lecture Capture & Video Management for Education. Opencast versions prior to 9.10 allow HTTP method spoofing, allowing to change the assumed HTTP method via URL parameter. This allows attackers to turn HTTP GET requests into PUT requests or an HTTP form to send DELETE...

PT-2021-8817 · Apereo · Apereo Opencast

Name of the Vulnerable Software and Affected Versions: Apereo Opencast versions 4.x through 10.x before 10.6 Description: An issue was discovered in Apereo Opencast where it sends system digest credentials during authentication attempts to arbitrary external services in some situations. This occu...

Opencast 安全漏洞

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. A security vulnerability exists in Opencast that allows an attacker to change the assumed HTTP method via URL parameters, such as converting an HTTP GET...

PT-2025-30942 · Opencast · Opencast

Name of the Vulnerable Software and Affected Versions: Opencast versions prior to 17.6 Description: Opencast incorrectly sent hashed global system account credentials org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass when fetching mediapackage elements included...

PT-2021-7434

Name of the Vulnerable Software and Affected Versions Opencast versions prior to 9.10 Opencast versions prior to 10.6 Description The issue allows attackers to include local files from Opencast's host machines and make them available via the web interface. This is possible because Opencast would...

Denial Of Service

opencast-kernel is vulnerable to denial of service. The vulnerability exists due to an insecure processing of a single HTTP request to parse XML through the system, causing it to expand a .crafted string 100,000 times causing the system to hang...

Billion laughs attack (XML bomb)

Impact Opencast is vulnerable to the Billion laughs attack which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast using a single HTTP request. Consider an XML file createMediaPackage.xml like this: xml mediapackage...

GHSA-9GWX-9CWP-5C2M Billion laughs attack (XML bomb)

Impact Opencast is vulnerable to the Billion laughs attack which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast using a single HTTP request. Consider an XML file createMediaPackage.xml like this: xml mediapackage...

Opencast < 9.6 DoS Vulnerability

Opencast is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2021-32623

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

CVE-2021-32623

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

Double free

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

CVE-2021-32623

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

Unspecified Vulnerability in Opencast (CNVD-2021-51326)

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. A security vulnerability exists in Opencast versions prior to 9.6, which can be exploited by attackers to conduct denial-of-service attacks...

CVE-2021-32623 Opencast vulnerable to billion laughs attack (XML bomb)

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

CVE-2021-32623

Opencast prior to version 9.6 is vulnerable to the Billion Laughs (XML bomb) attack, allowing a crafted ingest XML to cause memory exhaustion and denial of service. Attack requires ingest privileges to exploit via XML processing, potentially impacting availability. The issue is fixed in Opencast ...

PT-2021-19815

Name of the Vulnerable Software and Affected Versions Opencast versions prior to 9.6 Description Opencast is vulnerable to the billion laughs attack, which allows an attacker to easily execute a denial of service attack, essentially taking down Opencast using a single HTTP request. To exploit thi...

CVE-2021-32623: Improper Restriction of Recursive Entity References in DTDs

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a seemingly permanent denial of service attack, essentially taking down Opencast usin...

Opencast 安全漏洞

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. A security vulnerability exists in Opencast versions prior to 9.6, which can be exploited by attackers to conduct denial-of-service attacks...

Opencast < 9.2 Access Control Vulnerability

Opencast is prone to an access control vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...