Paella Player: Stored XSS via caption cue text
Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7 and 20.2), there is a potential XSS attack though closed captions cue text. This vulnerability is fixed in 2.12.11.
org.opencastproject:opencast-engage-paella-player-7 org.opencastproject:opencast-engage-paella-player-7
- Actualiza a 19.7
- Actualiza a 20.2
Publicación Actualización