CVE-2022-41965 - CVE House
Back to Database
Status published Medium CVE-2022-41965

Opencast Authenticated OpenRedirect Vulnerability

Vulnerability Description

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. The vulnerability allows attackers to redirect users to sites outside of one's Opencast install, potentially facilitating phishing attacks or other security issues. This issue is fixed in Opencast 12.5 and newer.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-41965

Credits & Attribution

No credits recorded in the NVD database.

References

More from opencast

View All →
CVE-2025-61906
Opencast's editor accidentally publishes videos/overwrites publications #1626
Low 2.3
CVE-2025-61788
Opencast Paella Player 7 vulnerable to Cross-Site-Scripting
Medium 5.1
CVE-2025-55202
Opencast has a partial path traversal vulnerability in UI config
Low 2.7
CVE-2025-54380
Opencast still publishes global system account credentials
Medium 6.5
CVE-2024-52797
Searching Opencast may cause a denial of service
Medium 6.5

Affected Vendor

Affected Software

opencast
Vulnerable Versions:
< 12.5

Timeline

Official Publish: November 28th, 2022
Last Modified: April 23rd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-601

MITRE ATT&CK TTPs

T1566 Phishing
Initial Access
T1204 User Execution
Execution
T1071 Application Layer Protocol
Command and Control
T1189 Drive-by Compromise
Initial Access
T1036 Masquerading
Defense Evasion