CVE-2019-18394
1 advisory.
Maven/org.igniterealtime.openfire:parent CVE-2019-18394: critical 9.8
Ignite Realtime Openfire vulnerable to Server Side Request Forgery
Action: Upgrade org.igniterealtime.openfire:parent to 4.5.0-beta or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.0-beta | - |
Fixed versions
| 4.5.0-beta |
Sources
- osv: GHSA-mfjw-x4q4-69p9
- https://nvd.nist.gov/vuln/detail/CVE-2019-18394
- https://github.com/igniterealtime/Openfire/pull/1497
- https://github.com/igniterealtime/Openfire/commit/c2ccb38250910587498597955d0bbee8b58e46df
- https://github.com/igniterealtime/Openfire
- https://swarm.ptsecurity.com/openfire-admin-console
CVE-2019-18394 · published · modified · JSON