Unpatched Kaltura mwEmbed Flaws Allow Remote File Read and Code Execution
CERT/CC has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library, mwEmbed (also distributed as html5lib), that allow remote, unauthenticated attackers…