org.opencastproject:opencast-kernel
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Users with ROLE_COURSE_ADMIN can create new users in Opencast | org.opencastproject:opencast-kernel | Maven | Medium | Fix reported | |
| Hard-Coded Key Used For Remember-me Token in Opencast | org.opencastproject:opencast-kernel | Maven | Medium | Fix reported | |
| Authentication Bypass For Endpoints With Anonymous Access in Opencast | org.opencastproject:opencast-kernel | Maven | Critical | Fix reported | |
| Billion laughs attack (XML bomb) | org.opencastproject:opencast-kernel | Maven | High | Fix reported | |
| Disabled Hostname Verification in Opencast | org.opencastproject:opencast-kernel | Maven | High | Fix reported | |
| Opencast still publishes global system account credentials | org.opencastproject:opencast-commonorg.opencastproject:opencast-ingest-service-impl | Maven | Medium | Fix reported | |
| Opencast has Incorrect Permission Assignment | org.opencastproject:opencast-kernel | Maven | Medium | Fix reported |