High
Security advisory
Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-7681
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 08:16 UTC · Revision 1
Source evidence
Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.
osv:CVE-2017-7681
Complete source record
{
"id": "543ea9efc569f7c73da26e35540e5729ab1acc300a1d0531612c50e6b8b1dcb2",
"url": "https://osv.dev/vulnerability/CVE-2017-7681",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-7681",
"summary": "Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.",
"evidence": "osv:CVE-2017-7681",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-7681",
"aliases": [
"CVE-2017-7681",
"GHSA-335g-xcjh-ghc2"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/apache/openmeetings",
"type": "GIT",
"events": [
{
"introduced": "3db0ad0d802d9778f1d4df1c4f52dbf0ce289990"
},
{
"last_affected": "ec8117c4ab942262f06836f1efe5985ae600e12c"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:apache:openmeetings:2.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0"
},
{
"last_affected": "2.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:apache:openmeetings:3.1.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.1.2"
},
{
"last_affected": "3.1.2"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"2.0",
"3.1.2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7681.json"
}
}
],
"modified": "2026-10-24T10:31:05.072548906Z",
"provider": "osv",
"references": [],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:apache:openmeetings:1.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:2.1.1:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:2.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.0.7:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.1.1:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.1.3:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.1.4:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.1.5:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:apache:openmeetings:3.2.1:*:*:*:*:*:*:*"
],
"vendor_product": "apache:openmeetings",
"extracted_events": [
{
"range": [
{
"introduced": "1.0.0"
},
{
"last_affected": "1.0.0"
},
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
},
{
"introduced": "2.1.1"
},
{
"last_affected": "2.1.1"
},
{
"introduced": "2.2.0"
},
{
"last_affected": "2.2.0"
},
{
"introduced": "3.0.0"
},
{
"last_affected": "3.0.0"
},
{
"introduced": "3.0.1"
},
{
"last_affected": "3.0.1"
},
{
"introduced": "3.0.2"
},
{
"last_affected": "3.0.2"
},
{
"introduced": "3.0.3"
},
{
"last_affected": "3.0.3"
},
{
"introduced": "3.0.4"
},
{
"last_affected": "3.0.4"
},
{
"introduced": "3.0.5"
},
{
"last_affected": "3.0.5"
},
{
"introduced": "3.0.6"
},
{
"last_affected": "3.0.6"
},
{
"introduced": "3.0.7"
},
{
"last_affected": "3.0.7"
},
{
"introduced": "3.1.0"
},
{
"last_affected": "3.1.0"
},
{
"introduced": "3.1.1"
},
{
"last_affected": "3.1.1"
},
{
"introduced": "3.1.3"
},
{
"last_affected": "3.1.3"
},
{
"introduced": "3.1.4"
},
{
"last_affected": "3.1.4"
},
{
"introduced": "3.1.5"
},
{
"last_affected": "3.1.5"
},
{
"introduced": "3.2.0"
},
{
"last_affected": "3.2.0"
},
{
"introduced": "3.2.1"
},
{
"last_affected": "3.2.1"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-7681",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 440671,
"published_at": "2017-07-17T13:18:29.877+00:00"
}