Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-28936 EUVD-2023-2147GHSA-v93h-rwj8-78qh

Apache OpenMeetings: insufficient check of invitation hash

Published May 12, 2023 · Updated Oct 10, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache OpenMeetings Package: org.apache.openmeetings:openmeetings-db Ecosystem: Maven

Description

Attacker can access arbitrary recording/room

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenMeetings 2.0.0 – < 7.1.0 7.1.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.openmeetings:openmeetings-db >= 2.0.0, < 7.1.0 7.1.0 GHSA-v93h-rwj8-78qh

References