Moderate severityNVD Advisory· Published Nov 28, 2022· Updated Apr 23, 2025

Opencast Authenticated OpenRedirect Vulnerability

CVE-2022-41965

Description

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability allows attackers to redirect users to sites outside of one's Opencast install, potentially facilitating phishing attacks or other security issues. This issue is fixed in Opencast 12.5 and newer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.opencastproject:opencast-commonMaven	< 12.5	12.5

Affected products

ghsa-coords
pkg:maven/org.opencastproject/opencast-common
Range: < 12.5
Opencast/Opencastv5
Range: < 12.5

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-r3qr-vwvg-43f7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-41965ghsaADVISORY
github.com/opencast/opencast/commit/d2ce2321590f86b066a67e8c231cf68219aea017ghsaWEB
github.com/opencast/opencast/security/advisories/GHSA-r3qr-vwvg-43f7ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000