{"action":"Upgrade org.igniterealtime.openfire:parent to 3.9.2 or later.","affected":[{"fixed":"3.9.2","introduced":"0"}],"component":"org.igniterealtime.openfire:parent","cve_ids":["CVE-2014-2741"],"ecosystem":"Maven","epss":0.03774,"exploited":false,"fixed_versions":["3.9.2"],"ghsa_id":"GHSA-j5qh-cp3p-2h87","id":"tcs_01M5N9229FCXFEGAZAV9MZ1TWX","modified_at":"2025-04-13T23:08:09Z","published_at":"2022-05-17T04:44:51Z","references":["https://osv.dev/vulnerability/GHSA-j5qh-cp3p-2h87","https://nvd.nist.gov/vuln/detail/CVE-2014-2741","https://github.com/igniterealtime/Openfire/commit/3aec383e07ee893b77396fe946766bbd3758af77","https://github.com/igniterealtime/Openfire","https://web.archive.org/web/20140407092132/http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas","https://web.archive.org/web/20140705161237/http://fisheye.igniterealtime.org/changelog/openfiregit?cs=3aec383e07ee893b77396fe946766bbd3758af77","http://community.igniterealtime.org/thread/52317","http://openwall.com/lists/oss-security/2014/04/07/7","http://openwall.com/lists/oss-security/2014/04/09/1","http://www.kb.cert.org/vuls/id/495476"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-j5qh-cp3p-2h87","url":"https://osv.dev/vulnerability/GHSA-j5qh-cp3p-2h87"}],"summary":"Ignite Realtime Openfire vulnerable to XMPPbomb attack"}