CVE-2021-27576
Apache OpenMeetings: bandwidth can be overloaded with public web service
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Mar 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0
Affected products
Apache Software Foundation · Apache OpenMeetingsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →