CVE-2017-7680

Description

Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.

Affected products

• Apache Software Foundation / Apache OpenMeetings1.0.0 – 1.0.0

References

• MISChttp://markmail.org/message/whhibri7ervbjvda