apache/openmeetings · Security
Apache OpenMeetings does not correctly validate uploaded XML documents
- GHSA ID
- GHSA-67q3-gwww-pm4g
- CVE ID
- CVE-2017-7664
- Severity
- critical
- Published
- Updated
- CVSS
- 10 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
- CVSS v3
- 10 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
Description
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0. The issue is fixed in version 3.3.0.
CWEs
- CWE-611 · Improper Restriction of XML External Entity Reference