CVE-2026-77615
Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there is a potential XSS attack though closed captions cue text. This vulnerability is fixed in 2.12.11.
Faiblesse
Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there is a potential XSS attack though closed captions cue text. This vulnerability is fixed in 2.12.11.
Références
- https://github.com/opencast/opencast/commit/701682c635f668228c3e8fb7b4564b3294788e40
- https://github.com/opencast/opencast/pull/7736
- https://github.com/opencast/opencast/releases/tag/19.7
- https://github.com/opencast/opencast/releases/tag/20.2
- https://github.com/opencast/opencast/security/advisories/GHSA-m6c8-jcw2-5r25
- https://github.com/polimediaupv/paella-core/commit/94a36490808ac5a1f60a0745d71ec9253f6d206b
Trouvez la faille avant un attaquant.
Connectez-vous avec GitHub et lancez votre premier audit en moins d'une minute. L'offre gratuite ne nécessite aucune carte bancaire.