Vulnerabilities > CVE-2017-7664 - XXE vulnerability in Apache Openmeetings

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
apache
CWE-611

Summary

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.