Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:07:41 +0000 EUVD-2026-290490 https://cve.radiocsirt.org/vuln/euvd-2026-290490 EUVD-2026-290490 https://cve.radiocsirt.org/vuln/euvd-2026-290490 fkie_cve-2026-33005 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33005 <p>Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings.</p> <p>Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID (metadata only NOT contents). Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object.</p> <p>This issue affects Apache OpenMeetings: from 3.10 before 9.0.0.</p> <p>Users are recommended to upgrade to version 9.0.0, which fixes the issue.</p> <p>Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings.</p> <p>Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID (metadata only NOT contents). Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object.</p> <p>This issue affects Apache OpenMeetings: from 3.10 before 9.0.0.</p> <p>Users are recommended to upgrade to version 9.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33005 GHSA-78cg-fc6c-w44w — Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability https://cve.radiocsirt.org/vuln/ghsa-78cg-fc6c-w44w <p><strong>Affected:</strong> Maven: org.apache.openmeetings:openmeetings-parent</p> <p>Sny registered user can query web service with their credentials and get files/sub-folders of any folder by ID (metadata only NOT contents). Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object.</p> <p>This issue affects Apache OpenMeetings: from 3.10 before 9.0.0.</p> <p>Users are recommended to upgrade to version 9.0.0, which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.openmeetings:openmeetings-parent</p> <p>Sny registered user can query web service with their credentials and get files/sub-folders of any folder by ID (metadata only NOT contents). Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object.</p> <p>This issue affects Apache OpenMeetings: from 3.10 before 9.0.0.</p> <p>Users are recommended to upgrade to version 9.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-78cg-fc6c-w44w