CVE-2023-32315

🗓️ 26 May 2023 22:33:07Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 747 Views🌐 WEB

Openfire XMPP server admin console path traversal vulnerabilit

Reporter	Title	Published	Views	Family All 66
zdt	Openfire Authentication Bypass / Remote Code Execution Exploit	19 Jul 202300:00	–	zdt
GithubExploit	Exploit for Path Traversal in Igniterealtime Openfire	7 Jul 202307:48	–	githubexploit
GithubExploit	Exploit for Path Traversal in Igniterealtime Openfire	15 Dec 202316:30	–	githubexploit
GithubExploit	Exploit for Path Traversal in Igniterealtime Openfire	14 Apr 202518:07	–	githubexploit
GithubExploit	Exploit for Path Traversal in Igniterealtime Openfire	8 Oct 202619:46	–	githubexploit
GithubExploit	Exploit for Path Traversal in Igniterealtime Openfire	2 Jul 202320:38	–	githubexploit
GithubExploit	Exploit for Path Traversal in Igniterealtime Openfire	18 Jun 202315:42	–	githubexploit
GithubExploit	ghost-bits-toolkit	19 Jun 202616:17	–	githubexploit
GithubExploit	Exploit for Path Traversal in Igniterealtime Openfire	30 Jan 202517:47	–	githubexploit
GithubExploit	Exploit for Path Traversal in Igniterealtime Openfire	2 Jul 202320:38	–	githubexploit

NVD

Vulners

Node

igniterealtime openfireRange3.10.0–4.6.8

igniterealtime openfireRange4.7.0–4.7.5

[
  {
    "vendor": "igniterealtime",
    "product": "Openfire",
    "versions": [
      {
        "version": ">= 3.10.0, < 4.6.8",
        "status": "affected"
      },
      {
        "version": ">= 4.7.0, < 4.7.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/igniterealtime/Openfire/security/advisories/GHSA-gw42-f939-fhvm
packetstormsecurity	www.packetstormsecurity.com/files/173607/Openfire-Authentication-Bypass-Remote-Code-Execution.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog