Lucene search
AttackerKBAKB:3ED26C7B-CE17-447D-BECC-CC9F425C1F9CHistoryOct 24, 2019 - 12:00 a.m.
CVE-2019-18393
2019-10-2400:00:00
attackerkb.com
14
EPSS
0.002
Percentile
52.8%
PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.
Recent assessments:
ericalexanderorg at August 04, 2020 4:44pm UTC reported:
More detail:
<https://swarm.ptsecurity.com/openfire-admin-console/>
Stupid easy
> GET /plugins/search/…\conf\openfire.xml
Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 4
Related
veracode
veracode
Directory Traversal
2019-10-25 02:59:49
prion
prion
Directory traversal
2019-10-24 11:15:00
nuclei
nuclei
Ignite Realtime Openfire <4.42 - Local File Inclusion
2021-02-19 00:44:10
cve
cve
CVE-2019-18393
2019-10-24 11:15:10
github
github
Ignite Realtime Openfire directory traversal vulnerability
2022-05-24 16:59:50
osv
osv
CVE-2019-18393
2019-10-24 11:15:10
Ignite Realtime Openfire directory traversal vulnerability
2022-05-24 16:59:50
nvd
nvd
CVE-2019-18393
2019-10-24 11:15:10
cvelist
cvelist
CVE-2019-18393
2019-10-24 10:58:18
openvas
openvas
Openfire < 4.4.3 Multiple Vulnerabilities
2020-08-05 00:00:00