GHSA-22c6-3h88-26m3

Source

https://github.com/advisories/GHSA-22c6-3h88-26m3

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-22c6-3h88-26m3/GHSA-22c6-3h88-26m3.json

Aliases

• CVE-2019-20527

Published

2022-05-24T17:11:57Z

Modified

2023-11-08T04:01:30.808142Z

Details

Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter. This issue was fixed in version 4.4.2.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-20527
• https://www.netsparker.com/web-applications-advisories/ns-19-015-reflected-cross-site-scripting-in-openfire/