Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-25421 EUVD-2024-0848GHSA-6pwg-gg6j-5crm

Ignite Realtime Openfire privilege escalation vulnerability

Published Mar 26, 2024 · Updated Aug 7, 2024 · Assigned by mitre

Package: org.igniterealtime.openfire:xmppserver Ecosystem: Maven

Description

An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.igniterealtime.openfire:xmppserver < 4.8.1 4.8.1 GHSA-6pwg-gg6j-5crm

References