PT-2017-17880 · Apache · Apache Openmeetings

Publicado 2017-07-14 · Atualizado 2022-05-17 · CVE-2017-7681

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 1.0.0 through 3.2.x

Description The issue allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.

Recommendations For versions 1.0.0 through 3.2.x, update to version 3.3.0 to resolve the issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-7681

GHSA-335G-XCJH-GHC2

Produtos afetados

Apache Openmeetings

Referências · 5

• https://github.com/apache/openmeetings · Nota
• https://osv.dev/vulnerability/CVE-2017-7681 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-335g-xcjh-ghc2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7681 · Nota de Segurança
• http://markmail.org/message/j774dp5ro5xmkmg6 · Nota