GHSA-h2mq-p9r5-wh94

ghsaUSosv

Ignite Realtime Openfire allows Cross-site Scripting

view advisory published 2022-05-24Licence: CC-BY-4.0

Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter. This issue was fixed in version 4.4.2.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-20525US	medium6.1	0.91% (60th)	—	2020-03-19
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.