Skip to content
OpenAdvisories
High · 7.5 CVE-2021-27576 EUVD-2021-1375GHSA-px9f-597f-wmcf

Apache OpenMeetings: bandwidth can be overloaded with public web service

Published Mar 15, 2021 · Updated Feb 13, 2025 · Assigned by apache

Description

If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenMeetings 4.0.0 – < Apache OpenMeetings 4*, Apache OpenMeetings 5 – ≤ 5.1.0 Apache OpenMeetings 4*

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.openmeetings:openmeetings-parent >= 4.0.0, < 6.0.0 6.0.0 GHSA-px9f-597f-wmcf

References