CVE-2017-7681: SQL Injection
Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7681?
CVE-2017-7681 is categorized as a critical vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2017-7681?
To fix CVE-2017-7681, upgrade Apache OpenMeetings to a version that addresses the SQL injection vulnerability.
What versions of Apache OpenMeetings are affected by CVE-2017-7681?
CVE-2017-7681 affects Apache OpenMeetings versions 1.0.0, 2.0, 2.1, 2.1.1, 2.2.0, and 3.0.0 to 3.2.1.
What types of attacks can CVE-2017-7681 enable?
CVE-2017-7681 can enable authenticated attackers to modify SQL queries and potentially leak sensitive data.
Is CVE-2017-7681 easy to exploit?
Exploitation of CVE-2017-7681 can be relatively straightforward for users who have authenticated access to the affected application.