What is CVE-2017-1000217?

CVE-2017-1000217 is a high-severity vulnerability in Opencast, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 8.8/10. Published 2017-11-17.

How severe is CVE-2017-1000217?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Opencast

CVE-2017-1000217

Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.

EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Opencast
N/a — versions n/a

Weakness classification (CWE)

CWE-74 — Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

References

cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2017-1000217?: CVE-2017-1000217 is a high-severity vulnerability in Opencast, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 8.8/10. Published 2017-11-17.
How severe is CVE-2017-1000217?: High severity. CVSS v3 base score is 8.8 out of 10.