Skip to content
OpenAdvisories
High · 7.5 CVE-2017-7680 EUVD-2022-4889GHSA-q52r-g8jf-wv3x

Apache OpenMeetings allows flash content to be loaded from untrusted domains

Published Jul 14, 2017 · Updated Sep 16, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache OpenMeetings Package: org.apache.openmeetings:openmeetings-parent Ecosystem: Maven

Description

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenMeetings 1.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.openmeetings:openmeetings-parent >= 1.0.0, < 3.3.0 3.3.0 GHSA-q52r-g8jf-wv3x

References