CVE-2017-14141: Kaltura Server

High severity, CVSS 7.2. EPSS: 3.1% chance of exploitation in the next 30 days.

The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.

Affected products

• Kaltura Kaltura Server: before 13.2.0 (fixed in 13.2.0)

Published 2017-09-19. Last modified 2026-06-17.