Description

The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file.

Remediation

References

http://packetstormsecurity.com/files/136434/Apache-OpenMeetings-3.0.7-Arbitary-File-Read.html

https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG

http://openmeetings.apache.org/security.html

http://www.securityfocus.com/archive/1/537887/100/0/threaded

Related Vulnerabilities

CVE-2023-36665 Vulnerability in npm package protobufjs

CVE-2022-39368 Vulnerability in maven package org.eclipse.californium:element-connector

CVE-2013-6447 Vulnerability in maven package org.jboss.seam:jboss-seam

CVE-2020-7638 Vulnerability in npm package confinit

CVE-2013-7379 Vulnerability in npm package tomato

Severity

High

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Patch Vendor Advisory