Not rated
CVE-2023-29246 An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache…
Description
An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache OpenMeetings 2.0 | 2.0.0 → < 7.1.0 | 7.1.0 |
| openmeetings 2.0 | 2.0.0 → < 7.1.0 | 7.1.0 |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache OpenMeetings
The 23 CVEs of Apache OpenMeetings →
CVE-2026-49488
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OpenMeetings
Not rated
CVE-2026-33005
Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings
Not rated
CVE-2026-33266
Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings
Not rated
CVE-2026-34020
Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings
Not rated