{"id":"CVE-2023-29246","aliases":["EUVD-2023-1579","GHSA-mg5h-f3q8-c96g"],"status":"published","title":"Apache OpenMeetings: allows null-byte Injection","description":"An attacker who has gained access to an admin account can perform RCE via null-byte injection\n\nVendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01464,"percentile":0.73822,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2023-05-12T07:43:20Z","modified":"2026-10-28T02:30:39Z","fixes":[{"ecosystem":"Maven","package":"org.apache.openmeetings:openmeetings-parent","fixed_in":["7.1.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.openmeetings:openmeetings-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"7.1.0"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.openmeetings:openmeetings-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"7.1.0"}]}],"versions":["3.1.2","3.1.3","3.1.4","3.1.5","3.2.0","3.2.1","3.3.0","3.3.1","3.3.2","4.0.0","4.0.1","4.0.10","4.0.11","4.0.3","4.0.4","4.0.5","4.0.6","4.0.7","4.0.9","5.0.0","5.0.0-M1","5.0.0-M2","5.0.0-M3","5.0.0-M4","5.1.0","6.2.0","6.3.0","7.0.0"]}],"products":[{"vendor":"apache","product":"openmeetings"},{"vendor":"apache software foundation","product":"apache openmeetings"}],"references":[{"url":"https://lists.apache.org/thread/230plvhbdx26m43b0sy942wlwt6kkmmr","tags":["vendor-advisory","x_transferred","Mailing List","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29246","tags":["advisory"]},{"url":"https://github.com/apache/openmeetings/commit/8e65a1344157b2898f2922d49a0bd2105687c4a5","tags":["web"]},{"url":"https://github.com/apache/openmeetings/commit/9f12a48994d0ad741ac140c52cbd2152f0d048d5","tags":["web"]},{"url":"https://github.com/apache/openmeetings/commit/f91ff1917027625f066a9007694a31d06e69df3a","tags":["web"]},{"url":"https://issues.apache.org/jira/browse/OPENMEETINGS-2765","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mg5h-f3q8-c96g"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29246.json","tags":["advisory"]},{"url":"https://github.com/apache/openmeetings","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-29246","title":"Apache OpenMeetings: allows null-byte Injection","description":"An attacker who has gained access to an admin account can perform RCE via null-byte injection\n\nVendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0","status":"published","published":"2023-05-12T07:43:20.422Z","modified":"2024-10-10T19:35:57.172Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:28.643185Z"}],"euvd":[{"id":"EUVD-2023-1579","description":"An attacker who has gained access to an admin account can perform RCE via null-byte injection\n\nVendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0","status":"published","published":"2023-05-12T07:43:20Z","modified":"2024-10-10T19:35:57Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:27:39.67018Z"}],"ghsa":[{"id":"GHSA-mg5h-f3q8-c96g","title":"Apache OpenMeetings vulnerable to remote code execution via null-bye injection","description":"An attacker who has gained access to an admin account can perform RCE via null-byte injection\n\nVendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0","status":"published","published":"2023-05-12T09:30:14Z","modified":"2023-11-04T05:05:07Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:37:12.407027Z"}],"nvd":[{"id":"CVE-2023-29246","description":"An attacker who has gained access to an admin account can perform RCE via null-byte injection\n\nVendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0","status":"published","published":"2023-05-12T08:15:08.997Z","modified":"2026-06-17T05:49:39.883Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:08:02.399327Z"}],"osv":[{"id":"CVE-2023-29246","title":"Apache OpenMeetings: allows null-byte Injection","description":"An attacker who has gained access to an admin account can perform RCE via null-byte injection\n\nVendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0","status":"published","published":"2023-05-12T07:43:20.422Z","modified":"2026-10-28T02:30:39.063796429Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"GHSA-mg5h-f3q8-c96g","title":"Apache OpenMeetings vulnerable to remote code execution via null-bye injection","description":"An attacker who has gained access to an admin account can perform RCE via null-byte injection\n\nVendor: The Apache Software Foundation\n\nVersions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0","status":"published","published":"2023-05-12T09:30:14Z","modified":"2024-02-16T08:08:47.998411Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:46:51.811331Z"}]}}