Vulnerabilities > CVE-2017-7664 - XXE vulnerability in Apache Openmeetings

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
apache
CWE-611
critical

Summary

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.