Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Apache OpenMeetings 7.1.0 Clear all filters
TI-2023-13413 CVE-2023-28936 · GHSA-v93h-rwj8-78qh

Apache OpenMeetings: insufficient check of invitation hash

Priority LOW 32

Attacker can access arbitrary recording/room Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01204 Published 2023-05-12 Fixed in 7.1.0 CWE-697
TI-2023-13492 CVE-2023-29032 · GHSA-v9rm-7rv9-r3fw

Apache OpenMeetings: allows bypass authentication

Priority LOW 39

An attacker that has gained access to certain private information can use this to act as other user.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01093 Published 2023-05-12 Fixed in 7.1.0 CWE-287
TI-2023-13658 CVE-2023-29246 · GHSA-mg5h-f3q8-c96g

Apache OpenMeetings: allows null-byte Injection

Priority LOW 37

An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01464 Published 2023-05-12 Fixed in 7.1.0 CWE-20