CVE-2016-2164 Apache OpenMeetings allows remote attackers to read arbitrary files by attempting to upload a file
HighCVSS 7.5
EPSS 7.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified protocol handler, which allows remote attackers to read arbitrary files by attempting to upload a file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.openmeetings/openmeetings-parent(Maven) | < 3.1.1 | 3.1.1 |
| apache openmeetings | <= 3.1.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- www.apache.org
- openmeetings.apache.org patch vendor-advisory
- packetstormsecurity.com exploit
- github.com
- github.com product
- 20160325 [CVE-2016-2164] Arbitrary file read via SOAP API mailing-list