CVE-2017-7684

Published: Jul 17, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server.

Affected (21)

Products: Apache: Openmeetings

Apache

1 product

Openmeetings

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Apache Openmeetings	Version 1.0.0
Apache Openmeetings	Version 2.0
Apache Openmeetings	Version 2.1.1
Apache Openmeetings	Version 2.1
Apache Openmeetings	Version 2.2.0
Apache Openmeetings	Version 3.0.0
Apache Openmeetings	Version 3.0.1
Apache Openmeetings	Version 3.0.2
Apache Openmeetings	Version 3.0.3
Apache Openmeetings	Version 3.0.4
Apache Openmeetings	Version 3.0.5
Apache Openmeetings	Version 3.0.6
Apache Openmeetings	Version 3.0.7
Apache Openmeetings	Version 3.1.0
Apache Openmeetings	Version 3.1.1
Apache Openmeetings	Version 3.1.2
Apache Openmeetings	Version 3.1.3
Apache Openmeetings	Version 3.1.4
Apache Openmeetings	Version 3.1.5
Apache Openmeetings	Version 3.2.0
Apache Openmeetings	Version 3.2.1