Описание
Apache OpenMeetings vulnerable to Cross-Site Request Forgery
Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks. The issue is fixed in version 3.3.0.
Пакеты
Наименование
org.apache.openmeetings:openmeetings-parent
maven
Затронутые версииВерсия исправления
>= 1.0.0, < 3.3.0
3.3.0
Связанные уязвимости
CVSS3: 8.8
nvd
больше 8 лет назад
Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks.