PT-2017-17879 · Apache · Apache Openmeetings

Publicado 2017-07-14 · Atualizado 2022-05-13 · CVE-2017-7680

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings version 1.0.0

Description The issue is related to an overly permissive crossdomain.xml file, which allows flash content to be loaded from untrusted domains.

Recommendations For Apache OpenMeetings version 1.0.0, consider restricting access to the crossdomain.xml file to prevent loading of flash content from untrusted domains until a more restrictive configuration or update is available.

Correção

Identificadores relacionados

CVE-2017-7680

GHSA-Q52R-G8JF-WV3X

Produtos afetados

Apache Openmeetings

Referências · 5

• https://github.com/apache/openmeetings · Nota
• https://osv.dev/vulnerability/CVE-2017-7680 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-q52r-g8jf-wv3x · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7680 · Nota de Segurança
• http://markmail.org/message/whhibri7ervbjvda · Nota