mwEmbed

Kaltura's unpatched player bugs arrive with a coordinator that could not reach the vendor

CERT/CC disclosed an unauthenticated file read and a code execution path in mwEmbed with no fix available. The advisory's only product is a list of network controls you apply yourself.