CVE-2022-41965
Authenticated OpenRedirect Vulnerability
Impact
**Description** Prior to Opencast 12.5 Opencast's Paella authentication page could be used to redirect to an arbitrary URL for authenticated users. **Impact** The vulnerability allows attackers to redirect users to sites outside of your Opencast install, potentially facilitating phishing attacks or other security issues. **Patches** This issue is fixed in Opencast 12.5 and newer **References** [Patch fixing the issue](https://github.com/opencast/opencast/commit/d2ce2321590f86b066a67e8c231cf68219aea017) **If you have any questions or comments about this advisory**: Open an issue in [our issue tracker](https://github.com/opencast/opencast/issues) Email us at [security@opencast.org](mailto:security@opencast.org)
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.opencastproject:opencast-common | < 12.5 | 12.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apereo | Opencast | before 12.5 |