Apache OpenMeetings Improper Authentication vulnerability

HOCH 8.1CVE-2023-29032 · GHSA-v9rm-7rv9-r3fw · Published 12/05/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-29032 ist eine Schwachstelle (HOCH (CVSS 8.1)) in org.apache.openmeetings:openmeetings-parent, openmeetings (apache).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.1%, höher als bei 65.4% aller Schwachstellen.
Abhilfe: auf 7.1.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
org.apache.openmeetings:openmeetings-parent Maven	`≥ 3.1.3, < 7.1.0`	`7.1.0`
openmeetings apache	`≥ 3.1.3, < 7.1.0`	`7.1.0`

Description

An attacker that has gained access to certain private information can use this to act as other user.

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 3.1.3 before 7.1.0

NVD description

An attacker that has gained access to certain private information can use this to act as other user. Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 3.1.3 before 7.1.0

References

nvd.nist.gov/vuln/detail/CVE-2023-29032 · ADVISORY
apache/openmeetings commit 4e89e0c · WEB
apache/openmeetings · PACKAGE
issues.apache.org/jira/browse/OPENMEETINGS-2764 · WEB
lists.apache.org/thread/j2d6mg3rzcphfd8vvvk09d8p4o9lvnqp · WEB

Weitere Schwachstellen in org.apache.openmeetings:openmeetings-parent

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.openmeetings:openmeetings-parent

Maven

≥ 3.1.3, < 7.1.0

7.1.0

openmeetings

apache

≥ 3.1.3, < 7.1.0

7.1.0

Description

An attacker that has gained access to certain private information can use this to act as other user.

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 3.1.3 before 7.1.0

NVD description

Weitere Schwachstellen in org.apache.openmeetings:openmeetings-parent

Alle anzeigen →