CVE-2023-32315

Ignite Realtime Openfire Path Traversal Vulnerability

Openfire

Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup Environment in an already configured Openfire environment to access restricted pages in the Openfire Admin Console reserved for administrative users. This vulnerability affects all…

27. Mai 2023

Ausgewertete Quellen

• Hinweis
  http://packetstormsecurity.com/files/173607/Openfire-Authentication-Bypass-Remote-Code-Execution.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32315
• CISA
  Ignite Realtime Openfire Path Traversal Vulnerability
• NVD
  CVE-2023-32315
• GitHub
  https://github.com/igniterealtime/Openfire/security/advisories/GHSA-gw42-f939-fhvm