CVE-2021-43807: Authentication Bypass by Spoofing

December 14, 2021 (updated December 20, 2021)

Opencast is an Open Source Lecture Capture & Video Management for Education.You can mitigate the problem by setting the SameSite=Strict attribute for your cookies. If this is a viable option for you depends on your integrations. We strongly recommend updating in any case.

References

github.com/opencast/opencast/commit/59cb6731067283e54f15462be38b6117d8b9ea8b
github.com/opencast/opencast/commit/8f8271e1085f6f8e306c689d6a56b0bb8d076444
github.com/opencast/opencast/security/advisories/GHSA-j4mm-7pj3-jf7v
nvd.nist.gov/vuln/detail/CVE-2021-43807

Code Behaviors & Features

Detect and mitigate CVE-2021-43807 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →