GHSA-q52r-g8jf-wv3x

Source

https://github.com/advisories/GHSA-q52r-g8jf-wv3x

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-q52r-g8jf-wv3x/GHSA-q52r-g8jf-wv3x.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-q52r-g8jf-wv3x

Aliases

CVE-2017-7680

Published

2022-05-13T01:47:04Z

Modified

2024-12-04T05:36:56Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

Apache OpenMeetings allows flash content to be loaded from untrusted domains

Details

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

Database specific

{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2022-11-22T18:57:26Z",
    "nvd_published_at":  "2017-07-17T13:18:00Z",
    "severity":  "HIGH"
}

References

Affected packages

Maven / org.apache.openmeetings:openmeetings-parent

Package

Name: org.apache.openmeetings:openmeetings-parent; View open source insights on deps.dev
Purl: pkg:maven/org.apache.openmeetings/openmeetings-parent

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.0.0

Fixed

3.3.0

Affected versions

3.*

3.1.2

3.1.3

3.1.4

3.1.5

3.2.0

3.2.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-q52r-g8jf-wv3x/GHSA-q52r-g8jf-wv3x.json"