CVE Vulnerabilities

CVE-2017-7680

Published: Jul 17, 2017 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

Affected Software

Name Vendor Start Version End Version
Openmeetings Apache 1.0.0 (including) 1.0.0 (including)
Openmeetings Apache 2.0 (including) 2.0 (including)
Openmeetings Apache 2.1 (including) 2.1 (including)
Openmeetings Apache 2.1.1 (including) 2.1.1 (including)
Openmeetings Apache 2.2.0 (including) 2.2.0 (including)
Openmeetings Apache 3.0.0 (including) 3.0.0 (including)
Openmeetings Apache 3.0.1 (including) 3.0.1 (including)
Openmeetings Apache 3.0.2 (including) 3.0.2 (including)
Openmeetings Apache 3.0.3 (including) 3.0.3 (including)
Openmeetings Apache 3.0.4 (including) 3.0.4 (including)
Openmeetings Apache 3.0.5 (including) 3.0.5 (including)
Openmeetings Apache 3.0.6 (including) 3.0.6 (including)
Openmeetings Apache 3.0.7 (including) 3.0.7 (including)
Openmeetings Apache 3.1.0 (including) 3.1.0 (including)
Openmeetings Apache 3.1.1 (including) 3.1.1 (including)
Openmeetings Apache 3.1.2 (including) 3.1.2 (including)
Openmeetings Apache 3.1.3 (including) 3.1.3 (including)
Openmeetings Apache 3.1.4 (including) 3.1.4 (including)
Openmeetings Apache 3.1.5 (including) 3.1.5 (including)
Openmeetings Apache 3.2.0 (including) 3.2.0 (including)
Openmeetings Apache 3.2.1 (including) 3.2.1 (including)

References