QID 982233

QID 982233: Java (maven) Security Update for org.apache.openmeetings:openmeetings-parent (GHSA-px9f-597f-wmcf)

If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0

Successful exploitation of this vulnerability may affect the confidentiality, integrity, and availability of the targeted user.

  • CVSS V3 rated as High - 7.5 severity.
  • CVSS V2 rated as Medium - 5 severity.
  • Solution
    Customers are advised to refer to GHSA-px9f-597f-wmcf for updates pertaining to this vulnerability.
    Vendor References

    CVEs related to QID 982233

    Software Advisories
    Advisory ID Software Component Link
    GHSA-px9f-597f-wmcf org.apache.openmeetings:openmeetings-parent URL Logo github.com/advisories/GHSA-px9f-597f-wmcf