Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption

2022-05-1301:47:06

Google

osv.dev

0.001 Low

EPSS

Percentile

25.3%

JSON

Apache OpenMeetings 1.0.0 doesn’t check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server.

CPENameOperatorVersion
org.apache.openmeetings:openmeetings-parenteq3.1.5
org.apache.openmeetings:openmeetings-parenteq3.2.0
org.apache.openmeetings:openmeetings-parenteq3.2.1
org.apache.openmeetings:openmeetings-parenteq3.1.4
org.apache.openmeetings:openmeetings-parenteq3.1.3
org.apache.openmeetings:openmeetings-parenteq3.1.2

Name	Operator	Version
org.apache.openmeetings:openmeetings-parent	eq	3.1.5
org.apache.openmeetings:openmeetings-parent	eq	3.2.0
org.apache.openmeetings:openmeetings-parent	eq	3.2.1
org.apache.openmeetings:openmeetings-parent	eq	3.1.4
org.apache.openmeetings:openmeetings-parent	eq	3.1.3
org.apache.openmeetings:openmeetings-parent	eq	3.1.2