Lucene search

K
osvGoogleOSV:CVE-2019-18393
HistoryOct 24, 2019 - 11:15 a.m.

CVE-2019-18393

2019-10-2411:15:10
Google
osv.dev
4

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

52.8%

PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

52.8%