How severe is CVE-2021-32623?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.5 out of 10.

What type of vulnerability is CVE-2021-32623?

This is classified as CWE-776, which is a common weakness in software security.

CVE-2021-32623 - MEDIUM Severity | CVSS 6.5

Vulnerability Description

Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a (seemingly permanent) denial of service attack, essentially taking down Opencast using a single HTTP request. To exploit this, users need to have ingest privileges, limiting the group of potential attackers The problem has been fixed in Opencast 9.6. There is no known workaround for this issue.

Related Vulnerabilities

CVE-2003-1564

MEDIUM

CVSS:6.5(Medium)

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a cra...

CWE-7762003

CVE-2008-3281

MEDIUM

CVSS:6.5(Medium)

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consu...

CWE-7762008