CVE-2017-15911
1 advisory.
Maven/org.igniterealtime.openfire:parent CVE-2017-15911: medium 4.8
Ignite Realtime Openfire Server has Cross-site Scripting vulnerability in admin console
Action: Upgrade org.igniterealtime.openfire:parent to 4.1.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.7 | - |
Fixed versions
| 4.1.7 |
Sources
- osv: GHSA-v3h2-4j2r-wqj8
- https://nvd.nist.gov/vuln/detail/CVE-2017-15911
- https://becomepentester.blogspot.ae/2017/10/Cross-Site-Scripting-Openfire-4.1.6-CVE-2017-15911.html
- https://issues.igniterealtime.org/browse/OF-1417
CVE-2017-15911 · published · modified · JSON