CVE-2017-14142: Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inje...

Security readout for executives and security teams

CVE-2017-14142 is a set of cross-site scripting flaws in Kaltura before 13.2.0. An attacker could cause vulnerable Kaltura pages to render attacker-controlled script or HTML through specific request parameters. Business risk depends on whether those administrative or tool endpoints are reachable and used by privileged staff. Exposure is most likely in organizations running Kaltura before 13.2.0 with the listed server/admin_console or server/alpha paths accessible to users or the internet. Source data does not provide CPEs or deployment prevalence. Treat as a near-term remediation item for any exposed or administrator-facing Kaltura deployment. Prioritize faster if the affected paths are internet-accessible or used by privileged users. Mitigation focus: Upgrade Kaltura to 13.2.0 or later through the vendor-supported path.; Review Kaltura PR 6003 commits and the Telekom Security advisory for fix context.; Restrict access to listed admin and tool paths where operationally possible..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.