CVE-2021-32623
1 advisory.
Maven/org.opencastproject:opencast-kernel CVE-2021-32623: high 8.1, EPSS 1.25%
Billion laughs attack (XML bomb)
Action: Upgrade org.opencastproject:opencast-kernel to 9.6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.6 | - |
Fixed versions
| 9.6 |
Sources
- osv: GHSA-9gwx-9cwp-5c2m
- https://github.com/opencast/opencast/security/advisories/GHSA-9gwx-9cwp-5c2m
- https://nvd.nist.gov/vuln/detail/CVE-2021-32623
- https://github.com/opencast/opencast/commit/16b0d641713fe31b8518fcf14fc5e4e815d81206
- https://github.com/opencast/opencast/commit/8ae27da5a6f658011a5741b3210e715b0dc6213e
- https://github.com/opencast/opencast
CVE-2021-32623 · published · modified · JSON