EUVD-2020-0278

Malware in sbrugna...

EUVD-2020-0279

Malware in sbrugna...

EUVD-2020-0261

Malware in sbrugna...

EUVD-2022-4233

Malicious code in bioql PyPI...

CVE-2025-54380

CVE-2025-54380 affects Opencast before version 17.6. The issue arises when fetching mediapackage elements from a MediPackage XML file, causing Opencast to disclose hashed global system account credentials (org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass) to a...

CVE-2020-5231

In Opencast before 7.6 and 8.1, users with the role ROLECOURSEADMIN can use the user-utils endpoint to create new users not including the role ROLEADMIN. ROLECOURSEADMIN is a non-standard role in Opencast which is referenced neither in the documentation nor in any code except for tests but only i...

CVE-2020-26234

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

CVE-2020-5228

Opencast before 8.1 and 7.6 allows unauthorized public access to all media and metadata by default via OAI-PMH. OAI-PMH is part of the default workflow and is activated by default, requiring active user intervention of users to protect media. This leads to users unknowingly handing out public...

PT-2025-30942 · Opencast · Opencast

Name of the Vulnerable Software and Affected Versions: Opencast versions prior to 17.6 Description: Opencast incorrectly sent hashed global system account credentials org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass when fetching mediapackage elements included...

Opencast 安全漏洞

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. Opencast suffers from a security vulnerability that stems from the fact that Opencast will open and include local files during ingestion. An attacker coul...

GHSA-94QW-R73X-J7HG Users with ROLE_COURSE_ADMIN can create new users in Opencast

Impact Users with the role ROLECOURSEADMIN can use the user-utils endpoint to create new users not including the role ROLEADMIN. For example: bash Use the admin to create a new user with ROLECOURSEADMIN using the admin user. We expect this to work. % curl -i -u admin:opencast...