Vulnerability Description
Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.
CVSS Score
8.8
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opencast | Opencast | <= 2.3.2 |
Related Weaknesses (CWE)
References
- https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0p
- https://groups.google.com/a/opencast.org/forum/#%21topic/security-notices/sCpt0p
FAQ
What is CVE-2017-1000217?
CVE-2017-1000217 is a vulnerability with a CVSS score of 8.8 (HIGH). Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.
How severe is CVE-2017-1000217?
CVE-2017-1000217 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-1000217?
Check the references section above for vendor advisories and patch information. Affected products include: Opencast Opencast.