Skip to content
OpenAdvisories

Package · Maven

org.igniterealtime.openfire:xmppserver

6 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-25420 Public exploit

    Ignite Realtime Openfire privilege escalation vulnerability

    An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.

  • High 8.6
    CVE-2023-32315 Exploited Public exploit Scanner template EPSS 100%

    Openfire administration console authentication bypass

    Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to us…

    KEV Aug 24, 2023