Directory Traversal in Ignite Realtime Openfire by Ignite Realtime

CVE-2019-18393

What is CVE-2019-18393?

The Ignite Realtime Openfire software version 4.4.2 and earlier is susceptible to a directory traversal vulnerability. This flaw allows an attacker to retrieve files outside of the intended Openfire home directory. By exploiting this weakness, an unauthorized user could gain access to sensitive information stored on the server, posing a significant risk to the integrity and confidentiality of data. It is essential for users of Openfire to apply necessary updates and patches to mitigate this security threat.

References