Test ID:	1.3.6.1.4.1.25623.1.0.112906
Category:	Denial of Service
Title:	Opencast < 9.6 DoS Vulnerability
Summary:	Opencast is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Opencast is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Opencast is vulnerable to a so called billion laughs attack, which allows an attacker to easily execute a (seemingly permanent) denial of service attack, essentially taking down Opencast using a single HTTP request. To exploit this, users need to have ingest privileges, limiting the group of potential attackers. Vulnerability Impact: Successful exploitation will lead to a denial of service, affecting the whole application. Affected Software/OS: Opencast prior to version 9.6. Solution: Update to version 9.6 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-32623 https://github.com/opencast/opencast/security/advisories/GHSA-9gwx-9cwp-5c2m https://github.com/opencast/opencast/commit/8ae27da5a6f658011a5741b3210e715b0dc6213e
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.