CVE-2022-41965
CVSS V2 None
CVSS V3 None
Description
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability allows attackers to redirect users to sites outside of one's Opencast install, potentially facilitating phishing attacks or other security issues. This issue is fixed in Opencast 12.5 and newer.
Overview
- CVE ID
- CVE-2022-41965
- Assigner
- security-advisories@github.com
- Vulnerability Status
- Analyzed
- Published Version
- 2022-11-28T21:15:10.510
- Last Modified Date
- 2022-12-01T23:14:22.927
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:apereo:opencast:*:*:*:*:*:*:*:* | 1 | OR | 12.5 |
References
| Reference URL | Reference Tags |
|---|---|
| https://github.com/opencast/opencast/commit/d2ce2321590f86b066a67e8c231cf68219aea017 | Patch Third Party Advisory |
| https://github.com/opencast/opencast/security/advisories/GHSA-r3qr-vwvg-43f7 | Third Party Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-41965 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41965 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-12-07 18:05:21 | Added to TrackCVE |