CVE-2017-1000217: High severity Opencast Opencast vulnerability
Published Nov 17, 2017
·Updated
Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.
Affected Software
2 affected componentsFixes available
maven/org.opencastproject:base<=2.3.2
2.3.3
Opencast Opencast<=2.3.2
Event History
Nov 17, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
May 14, 2022
Advisory Published
01:06 AM
Frequently Asked Questions
1
What is the severity of CVE-2017-1000217?
CVE-2017-1000217 is considered a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2017-1000217?
To fix CVE-2017-1000217, upgrade to Opencast version 2.3.3 or later.
3
What versions of Opencast are affected by CVE-2017-1000217?
Opencast versions 2.3.2 and older are affected by CVE-2017-1000217.
4
What exploited scenarios are possible with CVE-2017-1000217?
CVE-2017-1000217 can be exploited through script injections in media and metadata within the player and media module.
5
Is there a workaround for CVE-2017-1000217 prior to upgrading?
There is no documented workaround for CVE-2017-1000217; upgrading to a secure version is recommended.