CVE-2020-13951

HIGH

Apache OpenMeetings 4.0.0-5.0.0 - Denial of Service via NetTest Web Service

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-13951. PoCs published by SunCSR.

AI-analyzed exploit summary This exploit demonstrates a Denial of Service (DoS) vulnerability in Apache OpenMeetings 4.0.0 to 5.0.0 by injecting a semicolon and command into the 'hostname' parameter, causing the application to execute unintended commands.

Description

Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack.

Exploits (1)

exploitdb WORKING POC
by SunCSR · textwebappsmultiple
https://www.exploit-db.com/exploits/49094

This exploit demonstrates a Denial of Service (DoS) vulnerability in Apache OpenMeetings 4.0.0 to 5.0.0 by injecting a semicolon and command into the 'hostname' parameter, causing the application to execute unintended commands.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Apache OpenMeetings 4.0.0 - 5.0.0
No auth needed
Prerequisites: Network access to the target Apache OpenMeetings instance
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4

Scores

CVSS v3 7.5
EPSS 0.7329
EPSS Percentile 98.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (2)
apache/openmeetings 4.0.0 - 5.0.0
org.apache.openmeetings/openmeetings-parent 4.0.0 - 5.1.0Maven
Published Sep 30, 2020
Tracked Since Feb 18, 2026