Opencast vulnerabilities
We track 3 vulnerabilities in Opencast products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
Latest Opencast vulnerabilities
- 8.7 High severity
opencast: Improper Neutralization of Input During Web Page Generation
Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there is a potential XSS attack though closed captions cue text. This vulnerability is fixed in 2.12.11.
- 8.8 High severity
opencast: Session Fixation
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mh_default_org.xml accepts a client-selected JSESSIONID from the ;jse
- 7.5 High severity
opencast: Allocation of Resources Without Limits or Throttling
Opencast is free and open source software for automated video capture and distribution. First noticed in Opencast 13 and 14, Opencast's Elasticsearch integration may generate syntactically invalid Elasticsearch queries in relation to previously acceptable sear