Description

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

Remediation

References

http://markmail.org/message/cwr552iapmhukb45

http://www.securityfocus.com/bid/99576

Related Vulnerabilities

CVE-2022-36892 Vulnerability in maven package org.jenkins-ci.plugins:rhnpush-plugin

CVE-2020-5207 Vulnerability in maven package io.ktor:ktor-client-cio

CVE-2014-3623 Vulnerability in maven package org.apache.cxf:cxf-rt-ws-security

CVE-2023-34478 Vulnerability in maven package org.apache.shiro:shiro-web

CVE-2020-7709 Vulnerability in npm package json-pointer

Severity

Critical

Classification

CWE-611 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H

Tags

Mailing List Third Party Advisory VDB Entry