GHSA-4v67-wg88-37p9

Source

https://github.com/advisories/GHSA-4v67-wg88-37p9

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-4v67-wg88-37p9/GHSA-4v67-wg88-37p9.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-4v67-wg88-37p9

Aliases

CVE-2017-7683

Published

2022-05-17T02:28:11Z

Modified

2023-11-08T03:59:26Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Apache OpenMeetings displays Tomcat version and detailed error stack trace

Details

Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure. The issue is fixed in version 3.3.0.

Database specific

{
    "cwe_ids":  [
        "CWE-200"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2022-11-22T18:56:57Z",
    "nvd_published_at":  "2017-07-17T13:18:00Z",
    "severity":  "HIGH"
}

References

Affected packages

Maven / org.apache.openmeetings:openmeetings-parent

Package

Name: org.apache.openmeetings:openmeetings-parent; View open source insights on deps.dev
Purl: pkg:maven/org.apache.openmeetings/openmeetings-parent

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.0.0

Fixed

3.3.0

Affected versions

3.*

3.1.2

3.1.3

3.1.4

3.1.5

3.2.0

3.2.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-4v67-wg88-37p9/GHSA-4v67-wg88-37p9.json"