{"action":"Upgrade org.opencastproject:opencast-ingest-service-impl to 17.6 or later.","affected":[{"fixed":"17.6","introduced":"0"}],"component":"org.opencastproject:opencast-ingest-service-impl","cve_ids":["CVE-2025-54380"],"ecosystem":"Maven","epss":0.00399,"exploited":false,"fixed_versions":["17.6"],"ghsa_id":"GHSA-j63h-hmgw-x4j7","id":"tcs_01M5N9231EVNW38NA2RFBDM5JM","modified_at":"2026-02-04T02:31:03.239501Z","published_at":"2025-07-25T20:13:45Z","references":["https://osv.dev/vulnerability/GHSA-j63h-hmgw-x4j7","https://github.com/opencast/opencast/security/advisories/GHSA-hcxx-mp6g-6gr9","https://github.com/opencast/opencast/security/advisories/GHSA-j63h-hmgw-x4j7","https://nvd.nist.gov/vuln/detail/CVE-2025-54380","https://github.com/opencast/opencast/commit/2d3219113e2b9fadfb06443f5468b1c2157827a6","https://github.com/opencast/opencast/commit/e8980435342149375802648b9c9e696c9a5f0c9a","https://github.com/opencast/opencast"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-j63h-hmgw-x4j7#Maven/org.opencastproject:opencast-ingest-service-impl","url":"https://osv.dev/vulnerability/GHSA-j63h-hmgw-x4j7"}],"summary":"Opencast still publishes global system account credentials"}