PT-2017-17883
CVE-2017-7684
·
Published
2017-07-14
·
Updated
2022-05-13
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Apache OpenMeetings version 1.0.0
Description
The issue allows an attacker to cause a denial of service by uploading multiple large files to the server, as Apache OpenMeetings does not check the contents of files being uploaded.
Recommendations
For Apache OpenMeetings version 1.0.0, consider implementing file size limits and content checks on uploaded files to prevent denial of service attacks. As a temporary workaround, restrict the ability to upload large files to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾