openmeetings-wb-fileid-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-wb-fileid-idor Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-wb-fileid-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0. WHITEBOARD/PRESENTER CREATEOBJ stor...

openmeetings-cluster-openjpa

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-cluster-openjpa Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-cluster-openjpa Class: CWE-502 Reach: Remote Apache OpenMeetings 9.1.0. Leftover of CVE-2024-54676 doc...

openmeetings-chat-user-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-chat-user-idor Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-chat-user-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0 9773c59e. Any ROOM/DASHBOARD session...

openmeetings-calendar-save-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-calendar-save-idor Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-calendar-save-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software...

openmeetings-invite-recording-acl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-invite-recording-acl Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-invite-recording-acl Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0. CVE-2023-29032 stopped...

openmeetings-backup-config-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-backup-config-path Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-backup-config-path Class: File write leftover Reach: Remote Apache OpenMeetings 9.1.0 9773c59e -...

openmeetings-stale-install-admin

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-stale-install-admin Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-stale-install-admin Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0 9773c59e -...

openmeetings-soap-user-rights

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-soap-user-rights Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-soap-user-rights Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0. SOAP POST /user/...

openmeetings-soap-otp-skip

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-soap-otp-skip Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-soap-otp-skip Class: 2FA skip Reach: Remote Apache OpenMeetings 9.1.0. When otp.enabled is true, TOTP ru...

openmeetings-remember-me-password

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-remember-me-password Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-remember-me-password Class: ATO Reach: Remote Apache OpenMeetings 9.1.0. CVE-2026-33266 closed th...

openmeetings-nettest-ping-dos

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-nettest-ping-dos Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-nettest-ping-dos Class: DoS leftover Reach: Remote Apache OpenMeetings 9.1.0. Leftover of...

openmeetings-kms-unauth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-kms-unauth Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-kms-unauth Class: Unauth KMS Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation...

CVE-2026-49488

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

CVE-2026-49488: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

PT-2026-58016

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 5.0.0 through 9.0.x Description A path traversal issue exists where the software fails to properly limit pathnames to a restricted directory. An attacker with moderator rights in any room can read arbitrary files...

CVE-2026-33266

Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...

GHSA-78CG-FC6C-W44W Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability

Sny registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object. This issue affects Apache OpenMeetings: from...

CVE-2026-33005

Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields...

CVE-2026-33266

Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...

CVE-2026-34020

Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method with username and password passed as query parameters. Please check references regarding possible impact This issue affects Apache OpenMeetings: from 3.1.3...