https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:51:38.396359+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233382 EUVD-2026-233382 2026-10-02T20:51:38.398739+00:00 EUVD-2026-233382 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41965 fkie_cve-2022-41965 2026-10-02T20:51:38.398769+00:00

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability allows attackers to redirect users to sites outside of one's Opencast install, potentially facilitating phishing attacks or other security issues. This issue is fixed in Opencast 12.5 and newer.

 https://cve.radiocsirt.org/vuln/ghsa-r3qr-vwvg-43f7 GHSA-r3qr-vwvg-43f7 — Authenticated OpenRedirect Vulnerability 2026-10-02T20:51:38.398801+00:00

Affected: Maven: org.opencastproject:opencast-common

**Description** Prior to Opencast 12.5 Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users.

**Impact** The vulnerability allows attackers to redirect users to sites outside of your Opencast install, potentially facilitating phishing attacks or other security issues.

**Patches** This issue is fixed in Opencast 12.5 and newer

**References** [Patch fixing the issue](https://github.com/opencast/opencast/commit/d2ce2321590f86b066a67e8c231cf68219aea017)

**If you have any questions or comments about this advisory**: Open an issue in [our issue tracker](https://github.com/opencast/opencast/issues) Email us at [security@opencast.org](mailto:security@opencast.org)

 https://cve.radiocsirt.org/vuln/gsd-2022-41965 gsd-2022-41965 2026-10-02T20:51:38.398831+00:00 gsd-2022-41965