PT-2017-10913 · Opencast Community · Opencast

Published 2017-11-17 · Updated 2022-05-14 · CVE-2017-1000217

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Opencast versions prior to 2.3.3 Opencast versions prior to 3.0

Description The issue allows for script injections through media and metadata in the player and media module, resulting in arbitrary code execution.

Recommendations For Opencast versions prior to 2.3.3, update to version 2.3.3 or later. For Opencast versions prior to 3.0, update to version 3.0 or later.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2017-1000217

GHSA-QWFV-5JWJ-582H

Affected Products

Opencast

References · 8

• 🔥 https://groups.google.com/a/opencast.org/forum/#!topic/security-notices/sCpt0pIPEFg · Exploit
• https://osv.dev/vulnerability/GHSA-qwfv-5jwj-582h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000217 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000217 · Vendor Advisory
• https://github.com/opencast/opencast · Note
• https://github.com/opencast/opencast/commit/2d42e42f3cfcff3a775a2538f735fca8542ce1fc · Note
• https://github.com/opencast/opencast/commit/fba2f35df24ce2aeaff627200065cbade9b3a0cd · Note
• https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0pIPEFg · Note