Description
Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.
Remediation
References
http://markmail.org/message/whhibri7ervbjvda
Related Vulnerabilities
CVE-2020-13955 Vulnerability in maven package org.apache.calcite:calcite-core
CVE-2019-15488 Vulnerability in maven package org.igniterealtime.openfire:xmppserver
CVE-2020-35149 Vulnerability in npm package rxdb
CVE-2022-29265 Vulnerability in maven package org.apache.nifi:nifi
CVE-2023-37952 Vulnerability in maven package com.mabl.integration.jenkins:mabl-integration