GitHub Advisoryadvisory · Maven

GHSA-6cpg-3w7f-j67q Apache OpenMeetings RCE

CRITICAL Published 2022-05-14 Modified 2023-11-01 Official page ↗

Aliases: CVE-2016-8736
Ecosystem: Maven
Packages: org.apache.openmeetings:openmeetings-parent
Severity: Critical
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-502
Reviewed: 2023-07-28

Affected packages

• Maven org.apache.openmeetings:openmeetings-parent: < 3.1.2 → fixed in 3.1.2

Description

Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.

Related

Alias · CVE (1)

CVE-2016-8736 Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack. vulnerability

Weakness · CWE (1)

CWE-502 Deserialization of Untrusted Data weakness

References