Description
Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.
Remediation
References
http://markmail.org/message/whhibri7ervbjvda
Related Vulnerabilities
CVE-2019-20364 Vulnerability in maven package org.igniterealtime.openfire:xmppserver
CVE-2018-1000613 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2020-8137 Vulnerability in npm package fastify
CVE-2020-26939 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2023-34612 Vulnerability in maven package com.helger.commons:ph-json