Design/Logic Flaw

An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability...

CVE-2017-2815

An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability...

PT-2018-7198

Name of the Vulnerable Software and Affected Versions: OpenFire User Import Export Plugin version 2.6.0 Description: An XML entity injection issue allows an attacker to retrieve arbitrary files or cause a denial of service. This can be triggered by sending a specially crafted web request. The...

CVE-2017-2815: Improper Restriction of XML External Entity Reference

An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability...