GHSA-mg5h-f3q8-c96gHighCVSS 7.2

Apache OpenMeetings vulnerable to remote code execution via null-bye injection

Published
May 12, 2023
Last Modified
November 4, 2023

🔗 CVE IDs covered (1)

CVE-2023-29246 →

📋 Description

An attacker who has gained access to an admin account can perform RCE via null-byte injection

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

🎯 Affected products1

  • maven/org.apache.openmeetings:openmeetings-parent:>= 2.0.0, < 7.1.0

🔗 References (7)