PT-2017-17883 · Apache · Apache Openmeetings

Published 2017-07-14 · Updated 2022-05-13 · CVE-2017-7684

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings version 1.0.0

Description The issue allows an attacker to cause a denial of service by uploading multiple large files to the server, as Apache OpenMeetings does not check the contents of files being uploaded.

Recommendations For Apache OpenMeetings version 1.0.0, consider implementing file size limits and content checks on uploaded files to prevent denial of service attacks. As a temporary workaround, restrict the ability to upload large files to minimize the risk of exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2017-7684

GHSA-G3VQ-F35V-VHGM

Affected Products

Apache Openmeetings

References · 6

• https://osv.dev/vulnerability/GHSA-g3vq-f35v-vhgm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7684 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7684 · Security Note
• https://github.com/apache/openmeetings · Note
• http://markmail.org/message/v6dpmrdd6cgg66up · Note
• http://securityfocus.com/bid/99584 · Note