PUBLISHED
2026-04-09 16:16
MODIFIED
2026-04-09 16:16
EPSS (Prob. Exploit)
0.79%
Top 44.2%
> DESCRIPTION
Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings.
The REST login endpoint uses HTTP GET method with username and password passed as query parameters. Please check references regarding possible impact
This issue affects Apache OpenMeetings: from 3.1.3 before 9.0.0.
Users are recommended to upgrade to version 9.0.0, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-598: Use of HTTP Request With Sensitive Query String - The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.
> GITHUB SECURITY ADVISORY
GHSA-gcvm-c75m-h4p4
HIGH
Apache OpenMeetings Uses GET Request Method With Sensitive Query Strings
AFFECTED PACKAGES:
MAVEN / org.apache.openmeetings:openmeetings-parent
>= 3.1.3, < 9.0.0
Fixed in: 9.0.0
> HISTORIQUE DES MODIFICATIONS
Première apparition
09/04/2026 16:16
Source: NVD
📊
ENRICHISSEMENT
01/05/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-598: Use of HTTP Request With Sensitive Query String - The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.
Total des modifications: 1
Dernière mise à jour: 6 months ago