Lucene search
GoogleOSV:GHSA-59H8-H34R-Q9CVHistoryMay 24, 2022 - 4:59 p.m.
Ignite Realtime Openfire directory traversal vulnerability
2022-05-2416:59:50
Google
osv.dev
16
ignite realtime
openfire
directory traversal
EPSS
0.002
Percentile
52.8%
PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability. Version 4.5.0-beta contains a fix for the issue.
Related
cve
cve
CVE-2019-18393
2019-10-24 11:15:10
veracode
veracode
Directory Traversal
2019-10-25 02:59:49
prion
prion
Directory traversal
2019-10-24 11:15:00
nuclei
nuclei
Ignite Realtime Openfire <4.42 - Local File Inclusion
2021-02-19 00:44:10
attackerkb
attackerkb
CVE-2019-18393
2019-10-24 00:00:00
github
github
Ignite Realtime Openfire directory traversal vulnerability
2022-05-24 16:59:50
osv
osv
CVE-2019-18393
2019-10-24 11:15:10
nvd
nvd
CVE-2019-18393
2019-10-24 11:15:10
cvelist
cvelist
CVE-2019-18393
2019-10-24 10:58:18
openvas
openvas
Openfire < 4.4.3 Multiple Vulnerabilities
2020-08-05 00:00:00