ByteOS Network

NVD Vulnerability Details :

CVE-2017-1000217

Deferred

Source-cve@mitre.org

Published At-17 Nov, 2017 | 22:29

Updated At-20 Apr, 2025 | 01:37

Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

opencast>>opencast>>Versions up to 2.3.2(inclusive)

cpe:2.3:a:opencast:opencast:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-74	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0pIPEFg	cve@mitre.org	N/A
https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0pIPEFg	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History