CERT24Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run CodeLoading data…
CERT24Threat Observatory
Period

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

CERT/CC disclosed two unpatched vulnerabilities in Kaltura’s HTML5 video player library, mwEmbed. A remote unauthenticated attacker with network access to the endpoint may read arbitrary files from a server and, under specific conditions, execute code on it. No fix is available, and no exploitation had been reported at the time of publication.

← Back to intelligence

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

CERT/CC disclosed two unpatched vulnerabilities in Kaltura’s HTML5 video player library, mwEmbed. A remote unauthenticated attacker with network access to the endpoint may read arbitrary files from a server and, under specific conditions, execute code on it. No fix is available, and no exploitation had been reported at the time of publication.