Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-28326 EUVD-2023-0853GHSA-3r48-3m8r-4r9w

Apache OpenMeetings: allows user impersonation

Published Mar 28, 2023 · Updated Oct 23, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache OpenMeetings Package: org.apache.openmeetings:openmeetings-parent Ecosystem: Maven

Description

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0

Description: Attacker can elevate their privileges in any room

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenMeetings 2.0.0 – < 7.0.0 7.0.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.openmeetings:openmeetings-parent >= 2.0.0, < 7.0.0 7.0.0 GHSA-3r48-3m8r-4r9w

References