openmeetings-chat-user-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-chat-user-idor openmeetings-chat-user-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0 9773c59e. Any ROOM/DASHBOARD session exports another user's private chat by setting activeTab=chatTab-uid...

openmeetings-cluster-openjpa

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-cluster-openjpa openmeetings-cluster-openjpa Class: CWE-502 Reach: Remote Apache OpenMeetings 9.1.0. Leftover of CVE-2024-54676 docs whitelist. Default bin/startup.sh does not set OpenJPA lists...

openmeetings-invite-recording-acl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-invite-recording-acl openmeetings-invite-recording-acl Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0. CVE-2023-29032 stopped copying Wicket ADMIN into WebSession.rights. checkHashes still...

openmeetings-kms-unauth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-kms-unauth openmeetings-kms-unauth Class: Unauth KMS Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation OpenMeetings Java defaults kurento.ws.url to loopback. Official...

openmeetings-nettest-ping-dos

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-nettest-ping-dos openmeetings-nettest-ping-dos Class: DoS leftover Reach: Remote Apache OpenMeetings 9.1.0. Leftover of CVE-2021-27576. RateLimitRequestFilter returns early for type=ping and type=jitter n...

openmeetings-remember-me-password

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-remember-me-password openmeetings-remember-me-password Class: ATO Reach: Remote Apache OpenMeetings 9.1.0. CVE-2026-33266 closed the hardcoded remember-me key per-instance AES-GCM. Cookie LoggedIn still...

openmeetings-soap-user-rights

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-soap-user-rights openmeetings-soap-user-rights Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0. SOAP POST /user/ copies UserDTO.rights and will update by id. SOAP is the LMS integration...

openmeetings-soap-otp-skip

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-soap-otp-skip openmeetings-soap-otp-skip Class: 2FA skip Reach: Remote Apache OpenMeetings 9.1.0. When otp.enabled is true, TOTP runs only in Wicket SignInDialog.processOtp. UserWebService.login is passwo...

openmeetings-stale-install-admin

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-stale-install-admin openmeetings-stale-install-admin Class: Privilege leftover Reach: Remote Apache OpenMeetings 9.1.0 9773c59e - Apache Software Foundation InstallWizardPage redirects new requests after...

openmeetings-wb-fileid-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-wb-fileid-idor openmeetings-wb-fileid-idor Class: IDOR Reach: Remote Apache OpenMeetings 9.1.0. WHITEBOARD/PRESENTER CREATEOBJ stores client JSON including any fileId. RoomResourceReference then serves...

CVE-2026-49488

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

CVE-2026-49488

Technical details are not publicly available in the provided documents. No versions, exploit vectors, or remediation specifics are provided beyond upgrade guidance to 9.1.0 ; monitor for updates.

CVE-2026-49488 Apache OpenMeetings: Arbitrary File Read

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

org.apache.openmeetings:openmeetings-db (>=5.0.0, <=9.0.0) potentially affected by CVE-2026-49488 via org.apache.openmeetings:openmeetings-util (>=5.0.0, <=9.0.0)

org.apache.openmeetings:openmeetings-util MAVEN version =5.0.0, =5.0.0, =9.0.0 Source cves: CVE-2026-49488 Source advisory: MEND:CVE-2026-49488...

CVE-2026-49488

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

EUVD-2026-43666

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

PT-2026-58016

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 5.0.0 through 9.0.x Description A path traversal issue exists where the software fails to properly limit pathnames to a restricted directory. An attacker with moderator rights in any room can read arbitrary files...

CVE-2026-49488: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...

CVE-2026-34020

Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method with username and password passed as query parameters. Please check references regarding possible impact This issue affects Apache OpenMeetings: from 3.1.3...

CVE-2026-33005

Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields...