PT-2017-17870 · Apache · Apache Openmeetings

Publicado 2017-07-14 · Atualizado 2022-05-17 · CVE-2017-7664

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 3.1.0 through 3.2.x

Description The issue arises from the incorrect validation of uploaded XML documents. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the lack of proper validation of XML documents.

Recommendations For Apache OpenMeetings versions 3.1.0 through 3.2.x, update to version 3.3.0 to resolve the issue.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2017-7664

GHSA-67Q3-GWWW-PM4G

Produtos afetados

Apache Openmeetings

Referências · 6

• https://github.com/apache/openmeetings · Nota
• https://osv.dev/vulnerability/GHSA-67q3-gwww-pm4g · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7664 · Nota de Segurança
• http://securityfocus.com/bid/99576 · Nota
• https://osv.dev/vulnerability/CVE-2017-7664 · Aviso do Fabricante
• http://markmail.org/message/cwr552iapmhukb45 · Nota