<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: opencast</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-61906: Opencast is a free, open-source platform to support the management of educational audio and video content</title><link>https://patchthecve.com/cve/CVE-2025-61906.html</link><guid>https://patchthecve.com/cve/CVE-2025-61906.html</guid><pubDate>Mon, 19 Oct 2026 16:10:00 +0000</pubDate><description>MEDIUM 4.3: Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, in some situations, Opencast&#x27;s editor may publish a video without notifying the user. This may lead to users accidentally publishing media not meant for publish</description></item><item><title>CVE-2025-61788: Opencast is a free, open-source platform to support the management of educational audio and video content</title><link>https://patchthecve.com/cve/CVE-2025-61788.html</link><guid>https://patchthecve.com/cve/CVE-2025-61788.html</guid><pubDate>Mon, 19 Oct 2026 16:10:00 +0000</pubDate><description>MEDIUM 5.4: Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs (metadata like title, description, etc.) unfiltered and unmodified. The vulnerability allows attackers to i</description></item><item><title>CVE-2025-55202: Opencast is a free, open-source platform to support the management of educational audio and video content</title><link>https://patchthecve.com/cve/CVE-2025-55202.html</link><guid>https://patchthecve.com/cve/CVE-2025-55202.html</guid><pubDate>Mon, 19 Oct 2026 17:10:00 +0000</pubDate><description>MEDIUM 5.3: Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases. T</description></item><item><title>CVE-2025-54380: Opencast is a free, open-source platform to support the management of educational audio and video content</title><link>https://patchthecve.com/cve/CVE-2025-54380.html</link><guid>https://patchthecve.com/cve/CVE-2025-54380.html</guid><pubDate>Wed, 17 Jun 2026 09:39:57 +0000</pubDate><description>MEDIUM 6.5: Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to version 17.6, Opencast would incorrectly send the hashed global system account credentials (ie: org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass) w</description></item><item><title>CVE-2024-52797: Opencast is free and open source software for automated video capture and distribution</title><link>https://patchthecve.com/cve/CVE-2024-52797.html</link><guid>https://patchthecve.com/cve/CVE-2024-52797.html</guid><pubDate>Wed, 17 Jun 2026 08:07:38 +0000</pubDate><description>MEDIUM 6.5: Opencast is free and open source software for automated video capture and distribution. First noticed in Opencast 13 and 14, Opencast&#x27;s Elasticsearch integration may generate syntactically invalid Elasticsearch queries in relation to previously acceptable search queries. From Opencast version 11.4 a</description></item></channel></rss>