Overview
Send and cancel a meeting request (iCal/vCal event) and generate the iCal String so that it can be written to a file.
This version is for Appian 22.3 and above. Cloud customers on a lower version of Appian that want to install this plugin should open a support case. Self-managed customers can find the latest jar for Appian 22.2 and lower version in the appmarket download file.
Key Features & Functionality
Contains three Smart Services that can
A sample Appian application is included with the download of this Plug-in. Release notes are also provided as part of the download package.
Are there any log4j vulnerability issues with this plug in going on? When a vulnerability scan has been done, this plug in did not pass the test. Tom Ryan
We used "Blackduck" tool for vulnerability test of the plugin. Tom Ryan
The vulnerability issues we have are mentioned below. Please check and let me know what can be done on this Tom Ryan
1) SendCancelMeetingRequestandGenerateiCalendar-4.3.5 (maven)Issue: Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in (1) lib/code.php, (2) lib/dbconnect.php, (3) lib/error.php, (4) lib/menu.php, and other unspecified files. NOTE: the provenance of this information is unknown; the details are obtained from third party information.2) SendCancelMeetingRequestandGenerateiCalendar-4.3.5 (maven)Issue: The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document.
Tom Ryan waiting on your reply.
This plugin should use the version of Log4J provided by the Appian environment where it is deployed. If you have not already, make sure to upgrade / apply the latest Appian hotfix to ensure any Log4J issues are patched.