GitHub Advisoryadvisory · Maven

GHSA-6pwg-gg6j-5crm Ignite Realtime Openfire privilege escalation vulnerability

HIGH Published 2024-03-26 Modified 2024-03-27 Official page ↗
Aliases
CVE-2024-25421
Ecosystem
Maven
Packages
org.igniterealtime.openfire:xmppserver
Severity
High
Weaknesses
CWE-863
Reviewed
2024-03-27

Affected packages

• Maven org.igniterealtime.openfire:xmppserver: < 4.8.1 → fixed in 4.8.1

Description

An issue in Ignite Realtime Openfire v.4.8.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

Related

Alias · CVE (1)

  • CVE-2024-25421 An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component. vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References