Skip to content
OpenAdvisories

Package · Maven

org.igniterealtime.openfire:parent

11 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-18394 Public exploit Scanner template EPSS 32%

    Ignite Realtime Openfire vulnerable to Server Side Request Forgery

    A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.