Apache OpenMeetings does not correctly validate uploaded XML documents

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-7664 · ADVISORY
• apache/openmeetings · PACKAGE
• markmail.org/message/cwr552iapmhukb45 · WEB
• securityfocus.com/bid/99576 · WEB

org.apache.openmeetings:openmeetings-parent のその他の脆弱性

• CVE-2026-34020高 7.5Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method w…
• CVE-2026-33266高 7.5Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in …
• CVE-2026-33005中 4.3Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their cre…
• CVE-2024-54676緊急 9.8Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0 Description: Default clustering inst…
• CVE-2023-29246高 7.2An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Software Foundation Versi…