CVE-2017-7680

HIGH

Apache OpenMeetings 1.0.0 - Overly Permissive crossdomain.xml

Title source: llm
STIX 2.1

Description

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

References (1)

Core 1
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://markmail.org/message/whhibri7ervbjvda

Scores

CVSS v3 7.5
EPSS 0.0125
EPSS Percentile 79.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

Status published
Products (23)
apache/openmeetings 1.0.0
apache/openmeetings 2.0
apache/openmeetings 2.1
apache/openmeetings 2.1.1
apache/openmeetings 2.2.0
apache/openmeetings 3.0.0
apache/openmeetings 3.0.1
apache/openmeetings 3.0.2
apache/openmeetings 3.0.3
apache/openmeetings 3.0.4
... and 13 more
Published Jul 17, 2017
Tracked Since Feb 18, 2026