Maven/org.opencastproject:opencast-ingest-service-impl CVE-2025-54380: medium 6.5, EPSS 0.40%

Opencast still publishes global system account credentials

Action: Upgrade org.opencastproject:opencast-ingest-service-impl to 17.6 or later.

Affected

Fixed versions

Sources

• osv: GHSA-j63h-hmgw-x4j7#Maven/org.opencastproject:opencast-ingest-service-impl
• https://github.com/opencast/opencast/security/advisories/GHSA-hcxx-mp6g-6gr9
• https://github.com/opencast/opencast/security/advisories/GHSA-j63h-hmgw-x4j7
• https://nvd.nist.gov/vuln/detail/CVE-2025-54380
• https://github.com/opencast/opencast/commit/2d3219113e2b9fadfb06443f5468b1c2157827a6
• https://github.com/opencast/opencast/commit/e8980435342149375802648b9c9e696c9a5f0c9a
• https://github.com/opencast/opencast

CVE-2025-54380 · published 2025-07-25T20:13:45Z · modified 2026-02-04T02:31:03.239501Z · JSON