CVE-2017-7680

Published: Jul 17, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

Affected (21)

Products: Apache: Openmeetings

1 product

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Apache Openmeetings	Version 1.0.0
Apache Openmeetings	Version 2.0
Apache Openmeetings	Version 2.1.1
Apache Openmeetings	Version 2.1
Apache Openmeetings	Version 2.2.0
Apache Openmeetings	Version 3.0.0
Apache Openmeetings	Version 3.0.1
Apache Openmeetings	Version 3.0.2
Apache Openmeetings	Version 3.0.3
Apache Openmeetings	Version 3.0.4
Apache Openmeetings	Version 3.0.5
Apache Openmeetings	Version 3.0.6
Apache Openmeetings	Version 3.0.7
Apache Openmeetings	Version 3.1.0
Apache Openmeetings	Version 3.1.1
Apache Openmeetings	Version 3.1.2
Apache Openmeetings	Version 3.1.3
Apache Openmeetings	Version 3.1.4
Apache Openmeetings	Version 3.1.5
Apache Openmeetings	Version 3.2.0
Apache Openmeetings	Version 3.2.1

References (2)

http://markmail.org/message/whhibri7ervbjvda

Source: security@apache.org

Mailing ListThird Party Advisory

http://markmail.org/message/whhibri7ervbjvda

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.