Description
Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.
Remediation
References
http://markmail.org/message/whhibri7ervbjvda
Related Vulnerabilities
CVE-2019-1003087 Vulnerability in maven package org.jenkins-ci.plugins:sinatra-chef-builder
CVE-2018-1002201 Vulnerability in maven package org.zeroturnaround:zt-zip
CVE-2020-14966 Vulnerability in maven package org.webjars.bowergithub.kjur:jsrsasign
CVE-2023-49652 Vulnerability in maven package org.jenkins-ci.plugins:google-compute-engine
CVE-2022-39322 Vulnerability in npm package @keystone-6/core