Description
An attacker that has gained access to certain private information can use this to act as other user.
Vendor: The Apache Software Foundation
Versions Affected: Apache OpenMeetings from 3.1.3 before 7.1.0
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache OpenMeetings | 3.1.3 – < 7.1.0 | 7.1.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.openmeetings:openmeetings-parent | >= 3.1.3, < 7.1.0 | 7.1.0 | GHSA-v9rm-7rv9-r3fw |
References
- https://lists.apache.org/thread/j2d6mg3rzcphfd8vvvk09d8p4o9lvnqp vendor-advisory