Advisory Weakness Curation

Opencast RCE Vulnerability Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Opencast 2.3.2 and older versions is vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.