CVE-2017-7681

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-7681
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7681.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-7681
Aliases
Published
2017-07-17T13:18:29.877Z
Modified
2026-04-11T12:02:02.118887Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "2.1.1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "2.1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "2.2.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.0.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.0.1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.0.2"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.0.3"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.0.4"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.0.5"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.0.6"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.0.7"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.1.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.1.1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.1.3"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.1.4"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.1.5"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.2.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.2.1"
                }
            ],
            "source": "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/apache/openmeetings

Affected ranges

Type
GIT
Repo
https://github.com/apache/openmeetings
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3db0ad0d802d9778f1d4df1c4f52dbf0ce289990
Last affected
ec8117c4ab942262f06836f1efe5985ae600e12c
Database specific 
{
    "cpe": [
        "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0"
        },
        {
            "last_affected": "3.1.2"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

2.*
2.0
3.*
3.1.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7681.json"