Apache OpenMeetings RCE

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-8736 · ADVISORY
• apache/openmeetings · PACKAGE
• web.archive.org/web/20161109161647/http://www.securityfocus.com/bid/94145 · WEB
• web.archive.org/web/20230518120850/https://openmeetings.markmail.org/thread/tr47byaaopnemvne · WEB
• openmeetings.markmail.org/thread/tr47byaaopnemvne · Mailing List
• securityfocus.com/bid/94145 · Third Party Advisory

Weitere Schwachstellen in org.apache.openmeetings:openmeetings-parent

• CVE-2026-34020HOCH 7.5Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method w…
• CVE-2026-33266HOCH 7.5Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in …
• CVE-2026-33005MITTEL 4.3Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their cre…
• CVE-2024-54676KRITISCH 9.8Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0 Description: Default clustering inst…
• CVE-2023-29246HOCH 7.2An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versi…