CVE-2017-7664
published 2017-07-17CVE-2017-7664: Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.
PriorityP345critical10CVSS 3.0
AVNACLPRNUINSCCLIHAH
EPSS
2.35%
81.7th percentile
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | openmeetings | — | — |
| apache | openmeetings | — | — |
| apache | openmeetings | — | — |
| apache | openmeetings | — | — |
| apache | openmeetings | — | — |
| apache | openmeetings | — | — |
| apache | openmeetings | — | — |
| apache | openmeetings | — | — |
| apache_software_foundation | apache_openmeetings | — | — |
CVSS provenance
nvdv3.010.0CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache OpenMeetings does not correctly validate uploaded XML documents
ghsa·2022-05-17
CVE-2017-7664 [CRITICAL] CWE-611 Apache OpenMeetings does not correctly validate uploaded XML documents
Apache OpenMeetings does not correctly validate uploaded XML documents
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0. The issue is fixed in version 3.3.0.
OSV
Apache OpenMeetings does not correctly validate uploaded XML documents
osv·2022-05-17
CVE-2017-7664 [CRITICAL] Apache OpenMeetings does not correctly validate uploaded XML documents
Apache OpenMeetings does not correctly validate uploaded XML documents
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0. The issue is fixed in version 3.3.0.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-07-17
Published