opencast vulnerabilities

CVEs per yearBy the year they were published

1. 20207
2. 20214
3. 20222
4. 20241
5. 20254
6. 20262

Newest CVEs

• CVE-2026-77615

  Paella Player: Stored XSS via caption cue text

  opencast · opencast

  High8.7
• CVE-2026-77614

  Opencast: Session fixation in login enables account takeover via crafted link

  opencast · opencast

  High8.8
• CVE-2025-61906

  Opencast's editor accidentally publishes videos/overwrites publications #1626

  opencast · opencast

  Low2.3
• CVE-2025-61788

  Opencast Paella Player 7 vulnerable to Cross-Site-Scripting

  opencast · opencast

  Medium5.1
• CVE-2025-55202

  Opencast has a partial path traversal vulnerability in UI config

  opencast · opencast

  Low2.7
• CVE-2025-54380

  Opencast still publishes global system account credentials

  opencast · opencast

  Medium6.5
• CVE-2024-52797

  Searching Opencast may cause a denial of service

  opencast · opencast

  Medium6.5
• CVE-2022-41965

  Opencast Authenticated OpenRedirect Vulnerability

  opencast · opencast

  Medium5.7
• CVE-2022-29237

  Limited Authentication Bypass for Media Files in Opencast

  opencast · opencast

  Medium5.4
• CVE-2021-43821

  Files Accessible to External Parties in Opencast

  opencast · opencast

  Critical9.9