Non évaluée
Apache OpenMeetings: allows null-byte Injection
CVE-2023-29246
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
An attacker who has gained access to an admin account can perform RCE via null-byte injection
Vendor: The Apache Software Foundation
Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov