Apache OpenMeetings vulnerable to remote code execution via null-bye injection

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-29246 · ADVISORY
• apache/openmeetings commit 8e65a13 · WEB
• apache/openmeetings commit 9f12a48 · WEB
• apache/openmeetings commit f91ff19 · WEB
• apache/openmeetings · PACKAGE
• issues.apache.org/jira/browse/OPENMEETINGS-2765 · WEB
• lists.apache.org/thread/230plvhbdx26m43b0sy942wlwt6kkmmr · WEB

Lỗ hổng khác của org.apache.openmeetings:openmeetings-parent

• CVE-2026-34020CAO 7.5Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method w…
• CVE-2026-33266CAO 7.5Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in …
• CVE-2026-33005TRUNG BÌNH 4.3Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their cre…
• CVE-2024-54676NGHIÊM TRỌNG 9.8Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0 Description: Default clustering inst…
• CVE-2023-29032CAO 8.1An attacker that has gained access to certain private information can use this to act as other user. Vendor: The Apache Software Foundation…