Description
Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache OpenMeetings | 1.0.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.openmeetings:openmeetings-parent | >= 1.0.0, < 3.3.0 | 3.3.0 | GHSA-g3vq-f35v-vhgm |
References
- 99584 vdb-entry
- [user] 20170713 CVE-2017-7684 - Apache OpenMeetings - Insecure File Upload mailing-list