Apache OpenMeetings does not correctly validate uploaded XML documents
Date: 2022-05
Affected: maven/org.apache.openmeetings:openmeetings-parent
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2017-7664
CWE: CWE-611
CVSS: 10 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H)

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0. The issue is fixed in version 3.3.0.


Mitigations:

Architectural layers (MAESTRO):