En resumen
- CVE-2016-2164 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a org.apache.openmeetings:openmeetings-parent, openmeetings (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 7.0%, mayor que el 94.2% de las vulnerabilidades.
- Solución: actualizar a 3.1.1 o posterior.
Description
The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file.
NVD description
The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file.
Más vulnerabilidades de org.apache.openmeetings:openmeetings-parent
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free