GHSA-5cg5-7vw6-jw4r

ghsaUSosv

Ignite Realtime Openfire allows Cross-site Scripting

view advisory published 2022-05-24Licence: CC-BY-4.0

Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter. This issue was fixed in version 4.4.2.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-20526US	medium6.1	0.91% (60th)	—	2020-03-19
Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.