CVE-2024-52797
1 advisory.
Maven/org.opencastproject:opencast-elasticsearch-impl CVE-2024-52797: medium 6.5
Searching Opencast may cause a denial of service
Action: Upgrade org.opencastproject:opencast-elasticsearch-impl to 13.10 (13.x), 14.3 (14.x) or 16.7 (16.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.4 | 13.10 | - |
| 14.0 | 14.3 | - |
| 15.0 | 16.7 | - |
Fixed versions
| 13.10 | 14.3 | 16.7 |
Sources
- osv: GHSA-jh6x-7xfg-9cq2
- https://github.com/opencast/opencast/security/advisories/GHSA-jh6x-7xfg-9cq2
- https://nvd.nist.gov/vuln/detail/CVE-2024-52797
- https://github.com/opencast/opencast/pull/5033
- https://github.com/opencast/opencast/pull/5150
- https://github.com/opencast/opencast/commit/3d5ebd163674eb18e070f52b64a18f92188f98c3
- https://github.com/opencast/opencast
- https://github.com/opencast/opencast/blob/7ad05f72814f057130122904015d471cfe5f4c58/docs/guides/admin/docs/changelog/older-versions/opencast-16.md?plain=1#L74
CVE-2024-52797 · published · modified · JSON