coldbraid

CVE-2023-32315 Ignite Realtime Openfire

Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.

CVSS
not scored

CWE-22

On CISA’s exploited list

Ignite Realtime Openfire Path Traversal Vulnerability

Added
2023-08-24
Federal patch deadline
2023-09-14
Ransomware use
not known