writeups.xyz / A Twist in the Code: OpenMeetings Vulnerabilities through Unexpected Application State

Submitter : c2a

Date: 19 July 2023

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• RCE
• Null-Byte Injection
• Security Code Review

Programs :

• Apache OpenMeetings

Authors :

• Stefan Schiller (@Scryh_)

Link :
https://www.sonarsource.com/blog/a-twist-in-the-code-openmeetings-vulnerabilities-through-unexpected-application-state/