GHSA-2c3p-9j5f-33g3

GitHub Security Advisory

Apache OpenMeetings responds to insecure HTTP methods

✓ GitHub Reviewed MODERATE Has CVE

Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH.

Maven org.apache.openmeetings:openmeetings-parent

Affected versions: 1.0.0 (fixed in 3.3.0)

CVE-2017-7685

GHSA ID

GHSA-2c3p-9j5f-33g3

Published

May 13, 2022 1:47 AM

Last Modified

November 22, 2022 6:57 PM

CVSS Score

5.0 /10

Primary Ecosystem

Maven

Primary Package

org.apache.openmeetings:openmeetings-parent

GitHub Reviewed

✓ Yes

Last updated: September 11, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.