Detections
Analytics
SCA: security update for org.opencastproject:opencast-elasticsearch-impl (GHSA-jh6x-7xfg-9cq2)
high Tenable Self-Hosted Container Security Plugin ID 416381
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Opencast is free and open source software for automated video capture and distribution. First noticed in
Opencast 13 and 14, Opencast's Elasticsearch integration may generate syntactically invalid Elasticsearch
queries in relation to previously acceptable search queries. From Opencast version 11.4 and newer,
Elasticsearch queries are retried a configurable number of times in the case of error to handle temporary
losses of connection to Elasticsearch. These invalid queries would fail, causing the retry mechanism to
begin requerying with the same syntactically invalid query immediately, in an infinite loop. This causes a
massive increase in log size which can in some cases cause a denial of service due to disk exhaustion.
Opencast 13.10 and Opencast 14.3 contain patches which address the base issue, with Opencast 16.7
containing changes which harmonize the search behaviour between the admin UI and external API. Users are
strongly recommended to upgrade as soon as possible if running versions prior to 13.10 or 14.3. While the
relevant endpoints require (by default) `ROLE_ADMIN` or `ROLE_API_SERIES_VIEW`, the problem queries are
otherwise innocuous. This issue could be easily triggered by normal administrative work on an affected
Opencast system. Those who run a version newer than 13.10 and 14.3 and see different results when
searching in their admin UI vs your external API or LMS, may resolve the issue by upgrading to 16.7. No
known workarounds for the vulnerability are available. (CVE-2024-52797)
See Also
Plugin Details
Severity: High
ID: 416381
Version: Revision 1.16
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.51
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2024-52797
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 11/20/2024
Vulnerability Publication Date: 11/20/2024
Reference Information
CVE: CVE-2024-52797
cwe: CWE-770