Medium · 6.1 CVE-2019-20528 EUVD-2022-5663GHSA-wx2w-8pqw-vp4g

Ignite Realtime Openfire allows Cross-site Scripting

Published Mar 18, 2020 · Updated Aug 5, 2024 · Assigned by mitre

Description

Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.igniterealtime.openfire:xmppserver	< 4.4.2	4.4.2	GHSA-wx2w-8pqw-vp4g