CVE-2017-7664

Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

• CWE-611

• http://markmail.org/message/cwr552iapmhukb45Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/99576Third Party Advisory, VDB Entry
• http://markmail.org/message/cwr552iapmhukb45Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/99576Third Party Advisory, VDB Entry

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7658In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (al…9.8
• CVE-2017-7659A maliciously constructed HTTP/2 request could cause mod_htt…
• CVE-2017-7660Apache Solr uses a PKI based mechanism to secure inter-node …
• CVE-2017-7661Apache CXF Fediz ships with a number of container-specific p…
• CVE-2017-7662Apache CXF Fediz ships with an OpenId Connect (OIDC) service…
• CVE-2017-7663Both global and Room chat are vulnerable to XSS attack in Ap…
• CVE-2017-7665In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are …
• CVE-2017-7666Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Reques…
• CVE-2017-7667Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establ…
• CVE-2017-7668The HTTP strict parsing changes added in Apache httpd 2.2.32…7.5
• CVE-2017-7669In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the …
• CVE-2017-7670The Traffic Router component of the incubating Apache Traffi…