Lucene search

Openmeetings Security Vulnerabilities - 2023

cve

CVE-2023-28326

Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0 Description: Attacker can elevate their privileges in any room

9.8CVSS

9.4AI Score

0.077EPSS

2023-03-28 01:15 PM

cve

CVE-2023-28936

Attacker can access arbitrary recording/room Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

5.3CVSS

5.7AI Score

0.001EPSS

2023-05-12 08:15 AM

cve

CVE-2023-29032

An attacker that has gained access to certain private information can use this to act as other user. Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 3.1.3 before 7.1.0

8.1CVSS

7.8AI Score

0.003EPSS

2023-05-12 08:15 AM

cve

CVE-2023-29246

An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

7.2CVSS

7AI Score

0.001EPSS

2023-05-12 08:15 AM