PT-2024-35448 · Opencast+1 · Opencast+1
Adilagha Aliyev
·
Published
2024-11-20
·
Updated
2025-10-28
·
CVE-2024-52797
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Opencast versions prior to 13.10
Opencast versions prior to 14.3
Description
Opencast's Elasticsearch integration may generate syntactically invalid Elasticsearch queries, causing the retry mechanism to begin requerying with the same syntactically invalid query immediately, in an infinite loop. This leads to a massive increase in log size, potentially causing a denial of service due to disk exhaustion. The issue could be easily triggered by normal administrative work on an affected Opencast system.
Recommendations
For Opencast versions prior to 13.10, upgrade to version 13.10 or later to address the base issue.
For Opencast versions prior to 14.3, upgrade to version 14.3 or later to address the base issue.
If running a version newer than 13.10 and 14.3 and seeing different results when searching in the admin UI vs the external API or LMS, upgrade to version 16.7 to harmonize the search behavior.
As a temporary workaround, consider restricting access to the
ROLE ADMIN or ROLE API SERIES VIEW endpoints to minimize the risk of exploitation.
No other workarounds are available for this issue.Exploit
Fix
DoS
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Elasticsearch
Opencast