NetSight
high7.5

CVE-2017-7680

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file.

Impact

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

Affected products

VendorProductAffected versions
ApacheOpenmeetings
Versions 1.0.0, 2.0, 2.1, 2.1.1, 2.2.0, 3.0.0

References