CVE-2023-29246 (published 2023-05-12T07:43:20.422Z)
An attacker who has gained access to an admin account can perform RCE via null-byte injection

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0
Affected products: Vendor: Apache Software Foundation
Product: Apache OpenMeetings
Versions: 2.0.0