PT-2017-17883

CVE-2017-7684

·

Published

2017-07-14

·

Updated

2022-05-13

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache OpenMeetings version 1.0.0
Description The issue allows an attacker to cause a denial of service by uploading multiple large files to the server, as Apache OpenMeetings does not check the contents of files being uploaded.
Recommendations For Apache OpenMeetings version 1.0.0, consider implementing file size limits and content checks on uploaded files to prevent denial of service attacks. As a temporary workaround, restrict the ability to upload large files to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-G3VQ-F35V-VHGM
Found an issue in the description? Have something to add? Feel free to write us 👾