Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1nM3ZxLWYzNXYtdmhnbc4AASbY

Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption

Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server.

Permalink: https://github.com/advisories/GHSA-g3vq-f35v-vhgm
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nM3ZxLWYzNXYtdmhnbc4AASbY
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: about 1 year ago
Updated: 4 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-g3vq-f35v-vhgm, CVE-2017-7684
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-7684
• http://markmail.org/message/v6dpmrdd6cgg66up
• http://www.securityfocus.com/bid/99584
• https://github.com/advisories/GHSA-g3vq-f35v-vhgm

Affected Packages