Description

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

Remediation

References

http://www.securityfocus.com/bid/99576

http://markmail.org/message/cwr552iapmhukb45

Related Vulnerabilities

CVE-2021-25941 Vulnerability in npm package deep-override

CVE-2018-1000407 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2019-15598 Vulnerability in npm package tree-kill

CVE-2019-5422 Vulnerability in npm package buttle

CVE-2015-5377 Vulnerability in maven package org.elasticsearch:elasticsearch

Severity

Critical

Classification

CWE-611 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H

Tags

Third Party Advisory VDB Entry Mailing List