{"action":"Upgrade org.igniterealtime.openfire:xmppserver to 4.6.8 (4.6.x) or 4.7.5 (4.7.x) or later.","affected":[{"fixed":"4.6.8","introduced":"3.10.0"},{"fixed":"4.7.5","introduced":"4.7.0"}],"component":"org.igniterealtime.openfire:xmppserver","cve_ids":["CVE-2023-32315"],"ecosystem":"Maven","epss":0.99999,"exploited":true,"fixed_versions":["4.6.8","4.7.5"],"ghsa_id":"GHSA-gw42-f939-fhvm","id":"tcs_01M5N8Z2ATHJM13DWH37C9ABB6","modified_at":"2025-10-22T19:24:43.190544Z","published_at":"2023-05-23T19:54:30Z","references":["https://osv.dev/vulnerability/GHSA-gw42-f939-fhvm","https://github.com/igniterealtime/Openfire/security/advisories/GHSA-gw42-f939-fhvm","https://nvd.nist.gov/vuln/detail/CVE-2023-32315","https://github.com/igniterealtime/Openfire/commit/2ac00a1ff42f5d3547ef58e21f8cdec992bfcf97","https://github.com/igniterealtime/Openfire/commit/71f3def2adeaac62729cf544b645c6819c3d9868","https://github.com/igniterealtime/Openfire/commit/a3b5ebd5032ff7be9d3ada5bf52bea2df96ec881","https://github.com/igniterealtime/Openfire","https://github.com/igniterealtime/Openfire/releases/tag/v4.6.8","https://github.com/igniterealtime/Openfire/releases/tag/v4.7.5","https://igniterealtime.atlassian.net/browse/OF-2595","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32315","http://packetstormsecurity.com/files/173607/Openfire-Authentication-Bypass-Remote-Code-Execution.html"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-gw42-f939-fhvm","url":"https://osv.dev/vulnerability/GHSA-gw42-f939-fhvm"},{"source":"kev","source_id":"CVE-2023-32315","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Administration Console authentication bypass in openfire xmppserver"}