CVE-2024-25421

An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOMCACHE component...

CVE-2024-25421

Ignite Realtime Openfire versions v.4.9.0 and earlier (and specifically v.4.8.0 and earlier ) are vulnerable to a privilege escalation flaw. The root cause is attributed to insufficient validation and management of user privileges within the ROOM_CACHE component. Additionally, a related issue exi...