CVE-2019-15488

Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test...

CVE-2019-15488

Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test...

CVE-2019-15488

CVE-2019-15488 affects Ignite Realtime Openfire before 4.4.1, where the LDAP setup test endpoint processes input in a way that allows a reflected XSS payload. The issue is described as a reflected XSS via the LDAP setup test in multiple sources (Openfire, Red Hat advisory, OSV, etc.). No explicit...

CVE-2019-15488: Improper Neutralization of Input During Web Page Generation

Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test...

PT-2019-14217

Name of the Vulnerable Software and Affected Versions Ignite Realtime Openfire versions prior to 4.4.1 Description The issue is related to reflected XSS that can be triggered via an LDAP setup test. Recommendations For versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue...