VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

T1Covered by 1 source · first reported by CERT/CC at 25 Aug, 16:11 UTC

Overview The Kaltura HTML5 Player V2 Library (mwEmbed / html5lib) contains two vulnerabilities, both involving the same insecure deserialization flaw, that enable arbitrary file read and remote code execution. Affected versions include html5lib v2.45, v2.103 and earlier, and other v2.x releases…

security

Sources

• T1VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura ServersCERT/CC25 Aug, 16:11