Executive brief
Apache OpenMeetings vulnerable to remote code execution via null-bye injection
Affected products
- Maven org.apache.openmeetings:openmeetings-parent
Junglewise Threat Intelligence
CVE-2023-29246: Apache OpenMeetings vulnerable to remote code execution via null-bye injection
CVE-2023-29246 · Severity: low · CVSS 3.1 · Published 2023-05-12
Technologies: org.apache.openmeetings:openmeetings-parent (Maven). Vendors: Maven.
Related threats
- Apache OpenMeetings information exposure in REST login endpoint
- Apache OpenMeetings hard-coded cryptographic key in remember-me cookies
- Apache OpenMeetings insufficient privilege checks in FileWebService
- Apache OpenMeetings vulnerable to Deserialization of Untrusted Data
- Apache OpenMeetings Improper Authentication vulnerability