Lucene search

K
cvelistMitreCVELIST:CVE-2019-18393
HistoryOct 24, 2019 - 10:58 a.m.

CVE-2019-18393

2019-10-2410:58:18
mitre
www.cve.org
4

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

52.8%

PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

52.8%