VYPR
Get started
← All advisories
Moderate severityNVD Advisory· Published Nov 28, 2022· Updated Apr 23, 2025

Opencast Authenticated OpenRedirect Vulnerability

CVE-2022-41965

Description

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability allows attackers to redirect users to sites outside of one's Opencast install, potentially facilitating phishing attacks or other security issues. This issue is fixed in Opencast 12.5 and newer.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.opencastproject:opencast-commonMaven
< 12.512.5

Affected products

1

Patches

1
d2ce2321590f

only redirect exact hostname matches

https://github.com/opencast/opencastGregor EichelbergerJun 28, 2022via ghsa
commit
1 file changed · +9 −4
  • modules/engage-paella-player/src/main/paella-opencast/ui/auth.html+9 −4 modified
    @@ -19,13 +19,18 @@
 			var redirect = search['redirect'];
 			var id = search['id'];
 			var series = search['series'] || search['sid'] || search['epFrom'];
-			if (redirect != undefined) {
-				window.location.href = decodeURIComponent(redirect);
+			if (redirect !== undefined) {
+				let redirectDomain = new URL(redirect);
+				if (window.location.hostname.toUpperCase() === redirectDomain.hostname.toUpperCase()) {
+					window.location.href = decodeURIComponent(redirect);
+				} else {
+					window.location.href = "/engage/ui/index.html";
+				}
 			}
-			else if (id != undefined) {
+			else if (id !== undefined) {
 				window.location.href = "watch.html?id=" + id;
 			}
-			else if (series != undefined) {
+			else if (series !== undefined) {
 				window.location.href = "/engage/ui/index.html?epFrom=" + series;
 			}
 			else {

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

4

News mentions

0

No linked articles in our index yet.