CVE-2020-13951

🗓️ 30 Sep 2020 17:22:51Reported by apacheType

cve🔗 web.nvd.nist.gov👁 106 Views🌐 WEB

Attackers exploit Apache OpenMeetings 4.0.0-5.0.0 NetTest web service for DoS attack

Reporter	Title	Published	Views	Family All 13
0day.today	Apache OpenMeetings 5.0.0 - (hostname) Denial of Service Vulnerability	24 Nov 202000:00	–	zdt
Circl	CVE-2020-13951	14 Nov 202406:07	–	circl
CNVD	Apache OpenMeetings Denial of Service Vulnerability (CNVD-2021-29483)	30 Nov 202000:00	–	cnvd
Check Point Advisories	Apache OpenMeetings Denial of Service (CVE-2020-13951; CVE-2021-27576)	18 Sep 202200:00	–	checkpoint_advisories
Cvelist	CVE-2020-13951	30 Sep 202017:22	–	cvelist
Exploit DB	Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service	24 Nov 202000:00	–	exploitdb
Github Security Blog	Denial of service in Apache OpenMeetings	10 Feb 202220:36	–	github
NVD	CVE-2020-13951	30 Sep 202018:15	–	nvd
OSV	GHSA-G37Q-26QX-8V2M Denial of service in Apache OpenMeetings	10 Feb 202220:36	–	osv
Packet Storm	Apache OpenMeetings 5.0.0 Denial Of Service	24 Nov 202000:00	–	packetstorm

NVD

Vulners

Node

apache openmeetingsRange4.0.0–5.0.0

[
  {
    "product": "Apache OpenMeetings",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache OpenMeetings 4.0.0 - 5.0.0"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/160186/Apache-OpenMeetings-5.0.0-Denial-Of-Service.html
lists	www.lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/re2aed827cd24ae73cbc320e5808020c8d12c7b687ee861b27d728bbc%40%3Cuser.openmeetings.apache.org%3E

Parameter	Position	Path	Description	CWE
hostname	query param	openmeetings/wicket/bookmarkable/org.apache.openmeetings.web.pages.HashPage	Exploits hostname parameter to trigger denial of service via OS command injection-like payload in OpenMeetings HashPage (CVE-2020-13951)

21 Nov 2024 05:02Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.73289