GitHub Advisoryadvisory · Maven

GHSA-q52r-g8jf-wv3x Apache OpenMeetings allows flash content to be loaded from untrusted domains

HIGH Published 2022-05-13 Modified 2022-11-22 Official page ↗
Aliases
CVE-2017-7680
Ecosystem
Maven
Packages
org.apache.openmeetings:openmeetings-parent
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Reviewed
2022-11-22

Affected packages

• Maven org.apache.openmeetings:openmeetings-parent: >= 1.0.0, < 3.3.0 → fixed in 3.3.0

Description

Apache OpenMeetings 1.0.0 has an overly permissive `crossdomain.xml` file. This allows for flash content to be loaded from untrusted domains.

Related

Alias · CVE (1)

  • CVE-2017-7680 Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. vulnerability

References