{"action":"Upgrade org.apache.openmeetings:openmeetings-parent to 7.1.0 or later.","affected":[{"fixed":"7.1.0","introduced":"3.1.3"}],"component":"org.apache.openmeetings:openmeetings-parent","cve_ids":["CVE-2023-29032"],"ecosystem":"Maven","epss":0.01093,"exploited":false,"fixed_versions":["7.1.0"],"ghsa_id":"GHSA-v9rm-7rv9-r3fw","id":"tcs_01M5N9DRYKRXZWF4V7QS0XNDDS","modified_at":"2024-02-16T08:07:03.508537Z","published_at":"2023-05-12T09:30:15Z","references":["https://osv.dev/vulnerability/GHSA-v9rm-7rv9-r3fw","https://nvd.nist.gov/vuln/detail/CVE-2023-29032","https://github.com/apache/openmeetings/commit/4e89e0ca076c83f26562f1146cf3e81ba0b16a7f","https://github.com/apache/openmeetings","https://issues.apache.org/jira/browse/OPENMEETINGS-2764","https://lists.apache.org/thread/j2d6mg3rzcphfd8vvvk09d8p4o9lvnqp"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-v9rm-7rv9-r3fw","url":"https://osv.dev/vulnerability/GHSA-v9rm-7rv9-r3fw"}],"summary":"Apache OpenMeetings Improper Authentication vulnerability"}