CVE-2023-29246: Apache Openmeetings

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

Affected products

• Apache Openmeetings: from 2.0.0, before 7.1.0 (fixed in 7.1.0)

Published 2023-05-12. Last modified 2026-06-17.