CyberSecBulletin

Igniterealtime vulnerabilities

We track 2 vulnerabilities in Igniterealtime products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on March 26, 2024.

2vulnerabilities
0critical
2high
1exploited
7.3average CVSS score

Latest Igniterealtime vulnerabilities

  • 7.2 High severity

    openfire: Improper Check for Dropped Privileges

    CVE-2024-25420IgniterealtimeEPSS 6.46%

    An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.

  • 7.5 High severity

    Ignite Realtime Openfire Path Traversal Exploited

    CVE-2023-32315IgniterealtimeEPSS 100%

    Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use