oss-security - CVE-2021-27576: Apache OpenMeetings: bandwidth can be overloaded with public web service

Message-ID: <CAJmbs8h2x=qsfULgUkzjziS2m5iQnpA5T_Y124Oata4eFWuWHw@mail.gmail.com>
Date: Sat, 13 Mar 2021 18:29:46 +0700
From: Maxim Solodovnik <solomax@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2021-27576: Apache OpenMeetings: bandwidth can be overloaded with
 public web service

Description:

NetTest web service can be used to overload the bandwidth of the server

Versions Affected: 4.0.0 - 5.1.0

References:

https://lists.apache.org/thread.html/r9bb615bd70a0197368f5f3ffc887162686caeb0b5fc30592a7a871e9%40%3Cuser.openmeetings.apache.org%3E

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.