BIT-openfire-2020-24602

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/openfire/BIT-openfire-2020-24602.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-openfire-2020-24602
Aliases
Published
2024-03-06T11:00:44.205Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details

Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in the Server Properties and Security Audit Viewer JSP page

References

Affected packages

Bitnami / openfire

Package

Name
openfire
Purl
pkg:bitnami/openfire

Severity

  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
4.5.1
Last affected
4.5.1