What is GHSA-335g-xcjh-ghc2?

GHSA-335g-xcjh-ghc2 is a security advisory published by GitHub Security Advisories with High severity. Apache OpenMeetings vulnerable to SQL injection

Which CVE IDs does GHSA-335g-xcjh-ghc2 cover?

GHSA-335g-xcjh-ghc2 covers the following CVE IDs: CVE-2017-7681. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-335g-xcjh-ghc2?

GHSA-335g-xcjh-ghc2 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-335g-xcjh-ghc2?

GHSA-335g-xcjh-ghc2 affects 1 product, including: maven/org.apache.openmeetings:openmeetings-parent:\u003e= 1.0.0, \u003c 3.3.0.

GHSA-335g-xcjh-ghc2HighCVSS 8.8

Apache OpenMeetings vulnerable to SQL injection

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

February 2, 2023

🔗 CVE IDs covered (1)

CVE-2017-7681 →

📋 Description

Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end. The issue is fixed in version 3.3.0.

🎯 Affected products1

maven/org.apache.openmeetings:openmeetings-parent:>= 1.0.0, < 3.3.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2017-7681
http://markmail.org/message/j774dp5ro5xmkmg6
https://github.com/advisories/GHSA-335g-xcjh-ghc2