Apache OpenMeetings: allows user impersonation

CVE-2023-28326

What is CVE-2023-28326?

A vulnerability has been identified in Apache OpenMeetings that allows an attacker to elevate their privileges within any conference room. This could enable unauthorized users to gain administrative capabilities, potentially leading to further security breaches and exploitation of the application. Specifically, versions from 2.0.0 up to 6.9.9 are susceptible to this issue, emphasizing the need for immediate patching and user awareness.

References