Ignite Realtime Openfire Directory Traversal Vulnerability

Ignite Realtime Openfire is a real-time collaboration RTC server licensed under the open source Apache license. A directory traversal vulnerability exists in Ignite Realtime Openfire 4.4.2 and earlier versions. The vulnerability stems from PluginServlet.java in Openfire not ensuring that retrieve...