Vulnerability CVE-2023-29246


Published: 2023-05-12

Description:
An attacker who has gained access to an admin account can perform RCE via null-byte injection

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

Type:

CWE-20

(Improper Input Validation)

 References:
https://lists.apache.org/thread/230plvhbdx26m43b0sy942wlwt6kkmmr

Copyright 2026, cxsecurity.com

 

Back to Top