Is CVE-2020-5230 actively exploited?

No active exploitation of CVE-2020-5230 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-5230 be exploited remotely?

Yes. CVE-2020-5230 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2020-5230?

CVE-2020-5230 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2020-5230

HIGH

CVE-2020-5230

CWE-99Published: January 30, 2020· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker being able to escape working directories and write files to other locations. In addition, Opencast's Id.toString(…) vs Id.compact(…) behavior, the latter trying to mitigate some of the file system problems, can cause errors due to identifier mismatch since an identifier may unintentionally change. This issue is fixed in Opencast 7.6 and 8.1.

NVD Source

Technical Analysis

CVE-2020-5230 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 7.5.