Executive brief
Apache OpenMeetings vulnerable to Deserialization of Untrusted Data
Affected products
- Maven org.apache.openmeetings:openmeetings-parent
Junglewise Threat Intelligence
CVE-2024-54676: Apache OpenMeetings vulnerable to Deserialization of Untrusted Data
CVE-2024-54676 · Severity: medium · CVSS 4 · Published 2025-01-08
Technologies: org.apache.openmeetings:openmeetings-parent (Maven). Vendors: Maven.
Related threats
- Apache OpenMeetings information exposure in REST login endpoint
- Apache OpenMeetings hard-coded cryptographic key in remember-me cookies
- Apache OpenMeetings insufficient privilege checks in FileWebService
- Apache OpenMeetings Improper Authentication vulnerability
- Apache OpenMeetings vulnerable to remote code execution via null-bye injection