{"action":"Upgrade org.apache.openmeetings:openmeetings-parent to 7.1.0 or later.","affected":[{"fixed":"7.1.0","introduced":"2.0.0"}],"component":"org.apache.openmeetings:openmeetings-parent","cve_ids":["CVE-2023-29246"],"ecosystem":"Maven","epss":0.01464,"exploited":false,"fixed_versions":["7.1.0"],"ghsa_id":"GHSA-mg5h-f3q8-c96g","id":"tcs_01M5N952N8MPQRHR78AWPC7KVZ","modified_at":"2024-02-16T08:08:47.998411Z","published_at":"2023-05-12T09:30:14Z","references":["https://osv.dev/vulnerability/GHSA-mg5h-f3q8-c96g","https://nvd.nist.gov/vuln/detail/CVE-2023-29246","https://github.com/apache/openmeetings/commit/8e65a1344157b2898f2922d49a0bd2105687c4a5","https://github.com/apache/openmeetings/commit/9f12a48994d0ad741ac140c52cbd2152f0d048d5","https://github.com/apache/openmeetings/commit/f91ff1917027625f066a9007694a31d06e69df3a","https://github.com/apache/openmeetings","https://issues.apache.org/jira/browse/OPENMEETINGS-2765","https://lists.apache.org/thread/230plvhbdx26m43b0sy942wlwt6kkmmr"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-mg5h-f3q8-c96g","url":"https://osv.dev/vulnerability/GHSA-mg5h-f3q8-c96g"}],"summary":"Apache OpenMeetings vulnerable to remote code execution via null-bye injection"}