Apache OpenMeetings does not correctly validate uploaded XML documents

KRITISCH 10.0CVE-2017-7664 · GHSA-67q3-gwww-pm4g · Published 17/07/2017 · updated 17/06/2026

Kurz gesagt

CVE-2017-7664 ist eine Schwachstelle (KRITISCH (CVSS 10.0)) in org.apache.openmeetings:openmeetings-parent, openmeetings (apache).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.3%, höher als bei 83.7% aller Schwachstellen.
Abhilfe: auf 3.3.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
org.apache.openmeetings:openmeetings-parent Maven	`≥ 3.1.0, < 3.3.0`	`3.3.0`
openmeetings apache	`= 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.2.0= 3.2.1`	No fix yet

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0. The issue is fixed in version 3.3.0.

NVD description

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 3.1.0, < 3.3.0

3.3.0

= 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.2.0= 3.2.1

No fix yet

Weitere Schwachstellen in org.apache.openmeetings:openmeetings-parent

Alle anzeigen →