org.opencastproject:base (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.opencastproject:base, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2017-1000217 — CVSS 8.8 (high): Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting…
• CVE-2020-5230 — CVSS 7.7 (high): Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for…