On December 12 I filed an open meeting law complaint against the Chicopee City Council because it does not OCR any of its published meetin...

The Oklahoma Supreme Court stuck down the revised 2025 social studies standards, finding their approval violated the Open Meetings Act.

*automatic translation* 💥Announcement! Thursday 03.09.2026💥 🏳️‍⚧️✊🏾Meet-up for LGBTQIA+ and female refugees✊🏾🏳️‍🌈 Thursday, 03.09.2026 | 4.30 pm | Cittipunkt e.V., Brüsseler Straße 36 A, 13353 Berl...

The Oklahoma Supreme Court decided the state's top school board violated open meeting laws when approving new academic standards.

<p>OpenMeetings is an application that can be used for video calls, collaborative work, and presentations. It can also be added as a plugin to Jira, Confluence or Drupal applications. </p> <p><a href="https://www.sonarsource.com/blog/a-twist-in-the-code-openmeetings-vulnerabilities-through-unexpected-application-state/">Recent reports</a> shared by SonarSource, indicate that a newly discovered vulnerability could allow threat actors to execute commands on the underlying server.</p> <p>Threat actors only need an account that can be created easily on OpenMeetings to exploit this vulnerability. </p> <p>This remote command execution is a combination of Weak Hash, unrestricted access via invitation, and Null-byte injection, leading to the command execution vulnerability.</p> <h2><strong>Apache OpenMeeting Flaw</strong></h2> <p>OpenMeetings enables its users to join a new room when an event is added on the calendar. It also allows users to send an invitation to other users which is done using the Invitation class and setRoom class.</p> <div> <img src="https://lh3.googleusercontent.com/iF9B_hEfrWy3cHVdw7B_0oUcj7Hk4C1Gx0oGXK4Dcu8BRAVShcaUH0-6j9P0NRXRwPteNsgtRrGI-f9A-kxvytVg0ltYzxwi4dyfx5wFe2g-AMd-r2ipdRjrLH3KjVCKFsNsYboKpH5bvolZ1dcRi-8" alt=""><em>Rooms in OpenMeetings (Source: Sonarsource)</em></div> <p>This functionality can be hijacked by threat actors as it has a weak hash using the LIKE operator. This operator allows wildcards to be added as value which results in the attacker getting all the invitation hashes. </p> <div> <img src="https://lh6.googleusercontent.com/8249s5GPXIVkdlmBZJUesO_91Pxr8bkL6GWA_JrL7vQrMej2oCZNOYU5z5QzgYXGeQLavkOv_P30OCqSuu06BvAOuNPnFahef82Q6XCDnm3LQvrdCQPEnhPppyRIf4ZcswEL9x32AzxVFeeaqFYOyBY" alt=""><em>Room invitation sending (Source: Sonarsource)</em></div> <p>Threat actors can enumerate all the valid invitation hashes with this which can be used to gain access to a specific room on behalf of the invited user. However, no other actions can be performed with this. </p> <p>Furthermore, threat actors can create a zombie room by creating an event (which eventually creates a room) and joining the room. While being inside the room, the room can be deleted but sending an invitation from the room functionality still works.</p> <div> <img src="https://lh6.googleusercontent.com/H2uP7n9gQojc57xndfLWKm2EP51j-nFt-X_2xKfEgWjkdbgXbRmRR0TJYQqxb-LPtxGc3soEBl8-hKljqx6e4IO--vxONDAYZDx_Xl4_OzBrU88hWdRb4xv6gjhkqF5z9xjdLKzduZqZqTzRnnPW9c8" alt=""><em>Zombie Room creation (Source: Sonarsource)</em></div> <p>Once they combine the wildcard enumeration and use the invitation functionality to send an invitation to the admin user, administrative rights are gained due to hrights class set empty, resulting in giving the privilege of the invited user.</p> <div> <img src="https://lh3.googleusercontent.com/hjshlFDj0F-jpEXKlDj7rydgUgU3YxwPz6w6oMN5fjsVq4OR7NKHwVCPLBhfv6aKDCau8BqT_BuNVzhtIhJo6PL3hvZGGxHCmqgQjBza1vDg6Ukm-PKwpjcz7jVXR1XF2N9SgW8E24DU-IDQKaHan4Q" alt=""><em>Zombie room + Invitation to the Admin = Administrative Privilege (Source: Sonarsource)</em></div> <p>After performing these activities, the null-byte injection due to the ProcessBuilder executing null-byte in the java realm is OS-specific and implemented in native C. This leads to the threat actor executing arbitrary commands on the underlying server.</p> <h2><strong><a href="https://lists.apache.org/thread/y6vng44c22ll221rtvsv208x1pbjmdoc">CVE-2023-28936</a>: Weak Hash Comparison</strong></h2> <p>This vulnerability exists due to the use of getByHash method that queries the Invitation object from the database by user-provided hash using the LIKE operator that can accept wildcard values resulting in enumeration of all the invite hashes on the OpenMeetings application. This vulnerability is given a CVSS score of 5.3 (<strong>Medium</strong>).</p> <h2><strong><a href="https://lists.apache.org/thread/j2d6mg3rzcphfd8vvvk09d8p4o9lvnqp">CVE-2023-29032</a>: Unrestricted Access via Invitation Hash</strong></h2> <p>This vulnerability exists as the hrights set inherits the invited users rights if no room is identified when being passed to the setUser. This vulnerability was given a CVSS Score of 8.1 (<strong>High</strong>).</p> <h2><strong><a href="https://lists.apache.org/thread/230plvhbdx26m43b0sy942wlwt6kkmmr">CVE-2023-29246</a>: Null-Byte Injection</strong></h2> <p>A threat actor who gains admin privileges on the OpenMeetings can conduct null-byte injection to execute remote code execution on the server. This vulnerability was given a CVSS score of 7.2 (High).</p> <p>Apache has released security patches for this vulnerability and fixed it in the Apache OpenMeetings 7.1.0 version. It is recommended that users upgrade to the latest version of the application to avoid being attacked.</p> <p>The post <a href="https://cybersecuritynews.com/apache-openmeeting-flaw/">Apache OpenMeeting Flaw Allows Server Hijacks and Command Execution</a> appeared first on <a href="https://cybersecuritynews.com">Cyber Security News</a>.</p>

Researcher discovers vulnerabilities in the open source Web application, which were fixed in the latest Apache OpenMeeting update.

Multiple members of the public used the council's public‑comment period to accuse city staff of Brown Act violations related to changes in tabulation protocol and to describe confusion over a mailed streetlight ballot; the City Attorney clarified public‑comment procedures but did not adjudicate the legal claims.