GHSA-xhj7-jr45-5w8r

GitHub Security Advisory

Apache OpenMeetings updates user password in insecure manner

✓ GitHub Reviewed HIGH Has CVE

Apache OpenMeetings 1.0.0 updates user password in insecure manner. This issue is fixed in version 3.3.0.

Maven org.apache.openmeetings:openmeetings-parent

Affected versions: 1.0.0 (fixed in 3.3.0)

CVE-2017-7688

GHSA ID

GHSA-xhj7-jr45-5w8r

Published

May 13, 2022 1:47 AM

Last Modified

November 22, 2022 6:57 PM

CVSS Score

7.5 /10

Primary Ecosystem

Maven

Primary Package

org.apache.openmeetings:openmeetings-parent

GitHub Reviewed

✓ Yes

Last updated: September 13, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.