Description

Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.

Remediation

References

http://markmail.org/message/j774dp5ro5xmkmg6

Related Vulnerabilities

CVE-2020-28472 Vulnerability in maven package org.webjars.npm:aws-sdk

CVE-2020-8141 Vulnerability in npm package dot

CVE-2022-31194 Vulnerability in maven package org.dspace:dspace-jspui

CVE-2022-35204 Vulnerability in maven package org.webjars.npm:vite

CVE-2021-21179 Vulnerability in npm package electron

Severity

Critical

Classification

CWE-89 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Mailing List Third Party Advisory