CVE-2023-32315
1 advisory.
Maven/org.igniterealtime.openfire:xmppserver CVE-2023-32315: high 8.6, exploited
Administration Console authentication bypass in openfire xmppserver
Action: Upgrade org.igniterealtime.openfire:xmppserver to 4.6.8 (4.6.x) or 4.7.5 (4.7.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.10.0 | 4.6.8 | - |
| 4.7.0 | 4.7.5 | - |
Fixed versions
| 4.6.8 | 4.7.5 |
Sources
- osv: GHSA-gw42-f939-fhvm
- kev: CVE-2023-32315
- https://github.com/igniterealtime/Openfire/security/advisories/GHSA-gw42-f939-fhvm
- https://nvd.nist.gov/vuln/detail/CVE-2023-32315
- https://github.com/igniterealtime/Openfire/commit/2ac00a1ff42f5d3547ef58e21f8cdec992bfcf97
- https://github.com/igniterealtime/Openfire/commit/71f3def2adeaac62729cf544b645c6819c3d9868
- https://github.com/igniterealtime/Openfire/commit/a3b5ebd5032ff7be9d3ada5bf52bea2df96ec881
- https://github.com/igniterealtime/Openfire
- https://github.com/igniterealtime/Openfire/releases/tag/v4.6.8
- https://github.com/igniterealtime/Openfire/releases/tag/v4.7.5
- https://igniterealtime.atlassian.net/browse/OF-2595
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32315
- http://packetstormsecurity.com/files/173607/Openfire-Authentication-Bypass-Remote-Code-Execution.html
CVE-2023-32315 · published · modified · JSON