GHSA-r3qr-vwvg-43f7
Authenticated OpenRedirect Vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.opencastproject:opencast-common | < 12.5 | 12.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
**Description**
Prior to Opencast 12.5 Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users.
**Impact**
The vulnerability allows attackers to redirect users to sites outside of your Opencast install, potentially facilitating phishing attacks or other security issues.
**Patches**
This issue is fixed in Opencast 12.5 and newer
**References**
[Patch fixing the issue](https://github.com/opencast/opencast/commit/d2ce2321590f86b066a67e8c231cf68219aea017)
**If you have any questions or comments about this advisory**:
Open an issue in [our issue tracker](https://github.com/opencast/opencast/issues)
Email us at [[email protected]](mailto:[email protected])
References
External links from the advisory. They lead to third-party sites.