Description (CNA)
Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method with username and password passed as query parameters. Please check references regarding possible impact This issue affects Apache OpenMeetings: from 3.1.3 before 9.0.0. Users are recommended to upgrade to version 9.0.0, which fixes the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache OpenMeetings | affected 3.1.3 before 9.0.0 |
CWE
CWE-598
References
- https://owasp.org/www-community/vulnerabilities/Information_exposure_through_query_strings_in_url
- https://lists.apache.org/thread/2h3h9do5tp17xldr0nps1yjmkx4vs3db
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.