PT-2017-17883 · Apache · Apache Openmeetings

Publicado 2017-07-14 · Atualizado 2022-05-13 · CVE-2017-7684

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings version 1.0.0

Description The issue allows an attacker to cause a denial of service by uploading multiple large files to the server, as Apache OpenMeetings does not check the contents of files being uploaded.

Recommendations For Apache OpenMeetings version 1.0.0, consider implementing file size limits and content checks on uploaded files to prevent denial of service attacks. As a temporary workaround, restrict the ability to upload large files to minimize the risk of exploitation.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2017-7684

GHSA-G3VQ-F35V-VHGM

Produtos afetados

Apache Openmeetings

Referências · 6

• https://github.com/apache/openmeetings · Nota
• http://markmail.org/message/v6dpmrdd6cgg66up · Nota
• https://osv.dev/vulnerability/GHSA-g3vq-f35v-vhgm · Aviso do Fabricante
• http://securityfocus.com/bid/99584 · Nota
• https://osv.dev/vulnerability/CVE-2017-7684 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7684 · Nota de Segurança