Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

opencast — Vulnerabilities & Security Advisories 19

Browse all 19 CVE security advisories affecting opencast. AI-powered Chinese analysis, POCs, and references for each vulnerability.

OpenCast is an open-source platform for creating, managing, and distributing educational video content and lectures. Historically, it has been vulnerable to multiple remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and access control weaknesses. The platform's extensive plugin architecture and integration with external services have introduced additional attack surfaces. While no major public security incidents have been widely documented, the 18 recorded CVEs highlight consistent security challenges, particularly in authentication mechanisms and file handling. Organizations implementing OpenCast should prioritize timely patching and harden configurations against common web vulnerabilities.

Top products by opencast: opencast
CVE ID Title CVSS Severity Published
CVE-2026-77614 Opencast: Session fixation in login enables account takeover via crafted link — opencast CWE-384 8.8 High 2026-09-17
CVE-2025-61906 Opencast's editor accidentally publishes videos/overwrites publications #1626 — opencast CWE-200 3.5AI Low AI 2025-10-08
CVE-2025-61788 Opencast Paella Player 7 vulnerable to Cross-Site-Scripting — opencast CWE-79 5.4AI Medium AI 2025-10-08
CVE-2025-55202 Opencast has a partial path traversal vulnerability in UI config — opencast CWE-23 6.5 - 2025-08-29
CVE-2025-54380 Opencast still publishes global system account credentials — opencast CWE-200 6.5 Medium 2025-07-26
CVE-2024-52797 Searching Opencast may cause a denial of service — opencast CWE-770 6.5 Medium 2024-11-21
CVE-2022-41965 Opencast Authenticated OpenRedirect Vulnerability — opencast CWE-601 5.7 Medium 2022-11-28
CVE-2022-29237 Limited Authentication Bypass for Media Files in Opencast — opencast CWE-287 5.4 Medium 2022-05-24
CVE-2021-43821 Files Accessible to External Parties in Opencast — opencast CWE-552 9.9 Critical 2021-12-14
CVE-2021-43807 HTTP Method Spoofing in Opencast — opencast CWE-290 7.5 High 2021-12-14
CVE-2021-32623 Opencast vulnerable to billion laughs attack (XML bomb) — opencast CWE-776 8.1 High 2021-06-15
CVE-2021-21318 Removing access may not effect published series — opencast CWE-863 5.4 Medium 2021-02-18
CVE-2020-26234 Disabled Hostname Verification in OpenCast — opencast CWE-346 4.8 Medium 2020-12-08
CVE-2020-5206 Authentication Bypass For Endpoints With Anonymous Access in OpenCast — opencast CWE-285 8.7 High 2020-01-30
CVE-2020-5231 Opencast users with ROLE_COURSE_ADMIN can create new users — opencast CWE-285 4.8 Medium 2020-01-30
CVE-2020-5230 Opencast uses unsafe identifiers — opencast CWE-99 7.7 High 2020-01-30
CVE-2020-5222 Hard-Coded Key Used For Remember-me Token in OpenCast — opencast CWE-798 6.8 Medium 2020-01-30
CVE-2020-5229 Opencast stores passwords using outdated MD5 hash algorithm — opencast CWE-327 7.7 High 2020-01-30
CVE-2020-5228 Opencast allows unauthorized public access via OAI-PMH — opencast CWE-862 7.6 High 2020-01-30

This page lists every published CVE security advisory associated with opencast. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.