GitHub Advisoryadvisory · Maven

GHSA-g37q-26qx-8v2m Denial of service in Apache OpenMeetings

HIGH Published 2022-02-10 Modified 2022-02-10 Official page ↗
Aliases
CVE-2020-13951
Ecosystem
Maven
Packages
org.apache.openmeetings:openmeetings-parent
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2021-04-22

Affected packages

• Maven org.apache.openmeetings:openmeetings-parent: >= 4.0.0, < 5.1.0 → fixed in 5.1.0

Description

Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack.

Related

Alias · CVE (1)

  • CVE-2020-13951 Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References