GitHub Advisoryadvisory · Maven

GHSA-r3qr-vwvg-43f7 Authenticated OpenRedirect Vulnerability

MEDIUM Published 2022-11-30 Modified 2022-12-03 Official page ↗
Aliases
CVE-2022-41965
Ecosystem
Maven
Packages
org.opencastproject:opencast-common
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601
Reviewed
2022-11-30

Affected packages

• Maven org.opencastproject:opencast-common: < 12.5 → fixed in 12.5

Description

Description Prior to Opencast 12.5 Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. Impact The vulnerability allows attackers to redirect users to sites outside of your Opencast install, potentially facilitating phishing attacks or other security issues. Patches This issue is fixed in Opencast 12.5 and newer References Patch fixing the issue If you have any questions or comments about this advisory: Open an issue in our issue tracker Email us at [email protected]

Related

Alias · CVE (1)

  • CVE-2022-41965 Opencast is a free, open-source platform to support the management of educational audio and video content. vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References