GHSA-6cpg-3w7f-j67q

GitHub Security Advisory

Apache OpenMeetings RCE

✓ GitHub Reviewed CRITICAL Has CVE

Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.

Maven org.apache.openmeetings:openmeetings-parent

Affected versions: 0 (fixed in 3.1.2)

CVE-2016-8736

GHSA ID

GHSA-6cpg-3w7f-j67q

Published

May 14, 2022 1:29 AM

Last Modified

November 1, 2023 7:43 PM

CVSS Score

9.0 /10

Primary Ecosystem

Maven

Primary Package

org.apache.openmeetings:openmeetings-parent

GitHub Reviewed

✓ Yes

Last updated: September 15, 2025 6:32 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.