Maven/org.apache.openmeetings:openmeetings-parent CVE-2024-54676: critical, EPSS 68.78%
Apache OpenMeetings vulnerable to Deserialization of Untrusted Data
Action: Upgrade org.apache.openmeetings:openmeetings-parent to 8.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 8.0.0 | - |
Fixed versions
| 8.0.0 |
Sources
- osv: GHSA-mjf9-4pcv-vfg7
- https://nvd.nist.gov/vuln/detail/CVE-2024-54676
- https://github.com/apache/openmeetings/commit/1c3426c6d3abbd984a3c01a61decf1242ea38923
- https://github.com/apache/openmeetings
- https://issues.apache.org/jira/browse/OPENMEETINGS-2787
- https://lists.apache.org/thread/o0k05jxrt5tp4nm45lj14yfjxmg67m95
- http://www.openwall.com/lists/oss-security/2025/01/08/1
CVE-2024-54676 · published · modified · JSON