GHSA-v93h-rwj8-78qh

GitHub Security Advisory

Apache OpenMeetings insufficient authorization vulnerability

✓ GitHub Reviewed MODERATE Has CVE

Attacker can access arbitrary recording/room

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

Maven org.apache.openmeetings:openmeetings-db

Affected versions: 2.0.0 (fixed in 7.1.0)

CVE-2023-28936

GHSA ID

GHSA-v93h-rwj8-78qh

Published

July 6, 2023 9:14 PM

Last Modified

July 6, 2023 11:10 PM

CVSS Score

5.0 /10

Primary Ecosystem

Maven

Primary Package

org.apache.openmeetings:openmeetings-db

GitHub Reviewed

✓ Yes

Last updated: July 27, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.