CVE-2016-0784

published 2016-04-11

CVE-2016-0784: Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated…

Priority P2 60 medium 6.5 CVSS 3.0

AV N AC L PR L UI N S U C N I H A N

EXPLOIT

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apache	openmeetings	<= 3.1.0	—

Detection & IOCs extracted from sources · hover to see the quote

url http://domain:5080/openmeetings/#admin/backup↗

path ../../../public/hello.txt↗

• → Detect ZIP archive uploads to the OpenMeetings backup import endpoint containing entries with path traversal sequences (dot-dot) in filenames. ↗
• → Inspect ZIP archive entries for filenames containing '../' sequences; a malicious entry such as '../../../public/hello.txt' indicates exploitation of this vulnerability. ↗
• → Alert on POST requests to the OpenMeetings backup import URL (port 5080) from authenticated administrator sessions uploading ZIP files. ↗

• · Exploitation requires an authenticated administrator account; the attack surface is limited to users with admin privileges on the OpenMeetings instance. ↗
• · Affected versions span Apache OpenMeetings 1.9.x through 3.1.0; instances already running 3.1.1 or later are not vulnerable. ↗

CVSS provenance

nvd v3.0 6.5 MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:N/I:P/A:N

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22