Vulnerability in Apache Openmeetings

CVE-2020-13951

Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack.

EPSS: 0.733 (98.8th percentile) — read the EPSS interpretation.

Affected products

N/a Apache Openmeetings — versions Apache OpenMeetings 4.0.0 - 5.0.0

References

lists.apache.org/thread.html/re2aed827cd24ae73cbc320e5808020c8d12c7b687ee861b27… (x_refsource_MISC)
packetstormsecurity.com/files/160186/Apache-OpenMeetings-5.0.0-Denial-Of-Servic… (x_refsource_MISC)
[announce] 20210125 Apache Software Foundation Security Report: 2020 (mailing-list, x_refsource_MLIST)
[announce] 20210223 Re: Apache Software Foundation Security Report: 2020 (mailing-list, x_refsource_MLIST)