Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
Two unpatched Kaltura mwEmbed flaws allow unauthenticated file read and could enable RCE through unsafe deserialization.
More info