CVE-2017-7666

HIGH

Apache OpenMeetings 1.0.0 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks.

References (1)

Core 1
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://markmail.org/message/fkesu4e5hhz5xdbg

Scores

CVSS v3 8.8
EPSS 0.0019
EPSS Percentile 41.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-352 CWE-79
Status published
Products (23)
apache/openmeetings 1.0.0
apache/openmeetings 2.0
apache/openmeetings 2.1
apache/openmeetings 2.1.1
apache/openmeetings 2.2.0
apache/openmeetings 3.0.0
apache/openmeetings 3.0.1
apache/openmeetings 3.0.2
apache/openmeetings 3.0.3
apache/openmeetings 3.0.4
... and 13 more
Published Jul 17, 2017
Tracked Since Feb 18, 2026