CVE-2017-14141: High severity kaltura server vulnerability
Published Sep 19, 2017
·Updated
The wikidecode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.
Affected Software
1 affected component
Kaltura Kaltura server<13.2.0
Event History
Sep 19, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14141?
CVE-2017-14141 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2017-14141?
To mitigate CVE-2017-14141, upgrade Kaltura to version 13.2.0 or later.
3
What kind of attacks does CVE-2017-14141 allow?
CVE-2017-14141 allows for PHP object injection attacks, enabling the execution of arbitrary PHP code.
4
Which versions of Kaltura are affected by CVE-2017-14141?
CVE-2017-14141 affects Kaltura versions prior to 13.2.0.
5
Is authentication required to exploit CVE-2017-14141?
An attacker can exploit CVE-2017-14141 without authentication, making it especially dangerous.