272 matches found
openmeetings-chat-user-idor
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-chat-user-idor openmeetings-chat-user-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0 9773c59e. Any ROOM/DASHBOARD session exports another user's private chat by setting activeTab=chatTab-uid...
openmeetings-cluster-openjpa
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-cluster-openjpa openmeetings-cluster-openjpa Class: CWE-502 Reach: Remote Apache OpenMeetings 9.1.0. Leftover of CVE-2024-54676 docs whitelist. Default bin/startup.sh does not set OpenJPA lists...
openmeetings-invite-recording-acl
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-invite-recording-acl openmeetings-invite-recording-acl Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0. CVE-2023-29032 stopped copying Wicket ADMIN into WebSession.rights. checkHashes still...
openmeetings-kms-unauth
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-kms-unauth openmeetings-kms-unauth Class: Unauth KMS Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation OpenMeetings Java defaults kurento.ws.url to loopback. Official...
openmeetings-nettest-ping-dos
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-nettest-ping-dos openmeetings-nettest-ping-dos Class: DoS leftover Reach: Remote Apache OpenMeetings 9.1.0. Leftover of CVE-2021-27576. RateLimitRequestFilter returns early for type=ping and type=jitter n...
openmeetings-remember-me-password
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-remember-me-password openmeetings-remember-me-password Class: ATO Reach: Remote Apache OpenMeetings 9.1.0. CVE-2026-33266 closed the hardcoded remember-me key per-instance AES-GCM. Cookie LoggedIn still...
openmeetings-soap-user-rights
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-soap-user-rights openmeetings-soap-user-rights Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0. SOAP POST /user/ copies UserDTO.rights and will update by id. SOAP is the LMS integration...
openmeetings-soap-otp-skip
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-soap-otp-skip openmeetings-soap-otp-skip Class: 2FA skip Reach: Remote Apache OpenMeetings 9.1.0. When otp.enabled is true, TOTP runs only in Wicket SignInDialog.processOtp. UserWebService.login is passwo...
openmeetings-stale-install-admin
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-stale-install-admin openmeetings-stale-install-admin Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation InstallWizardPage redirects new requests after...
openmeetings-wb-fileid-idor
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-wb-fileid-idor openmeetings-wb-fileid-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0. WHITEBOARD/PRESENTER CREATEOBJ stores client JSON including any fileId. RoomResourceReference then serves...
CVE-2026-49488: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...
PT-2026-58016
Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 5.0.0 through 9.0.x Description A path traversal issue exists where the software fails to properly limit pathnames to a restricted directory. An attacker with moderator rights in any room can read arbitrary files...
CVE-2026-33266
Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...
GHSA-78CG-FC6C-W44W Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability
Sny registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object. This issue affects Apache OpenMeetings: from...
CVE-2026-33266
Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...
CVE-2026-33266: Use of Hard-coded Cryptographic Key
Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...
CVE-2026-33005: Improper Handling of Insufficient Privileges
Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields...
CVE-2026-34020: Use of GET Request Method With Sensitive Query Strings
Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method with username and password passed as query parameters. Please check references regarding possible impact This issue affects Apache OpenMeetings: from 3.1.3...
