CVEvulnerability

CVE-2017-7681

8.8 HIGH Published 2017-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-89

Description

Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.

Affected configurations

• apache openmeetings 1.0.0 • apache openmeetings 2.0 • apache openmeetings 2.1 • apache openmeetings 2.1.1 • apache openmeetings 2.2.0 • apache openmeetings 3.0.0 • apache openmeetings 3.0.1 • apache openmeetings 3.0.2 • apache openmeetings 3.0.3 • apache openmeetings 3.0.4 • apache openmeetings 3.0.5 • apache openmeetings 3.0.6 • apache openmeetings 3.0.7 • apache openmeetings 3.1.0 • apache openmeetings 3.1.1 • apache openmeetings 3.1.2 • apache openmeetings 3.1.3 • apache openmeetings 3.1.4 • apache openmeetings 3.1.5 • apache openmeetings 3.2.0 • apache openmeetings 3.2.1

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References