{"action":"Upgrade org.igniterealtime.openfire:parent to 4.5.0-beta or later.","affected":[{"fixed":"4.5.0-beta","introduced":"0"}],"component":"org.igniterealtime.openfire:parent","cve_ids":["CVE-2019-18394"],"ecosystem":"Maven","epss":0.32304,"exploited":false,"fixed_versions":["4.5.0-beta"],"ghsa_id":"GHSA-mfjw-x4q4-69p9","id":"tcs_01M5N9512VNZW2VJMT2F5KVNRR","modified_at":"2024-02-19T05:32:16.835852Z","published_at":"2022-05-24T16:59:50Z","references":["https://osv.dev/vulnerability/GHSA-mfjw-x4q4-69p9","https://nvd.nist.gov/vuln/detail/CVE-2019-18394","https://github.com/igniterealtime/Openfire/pull/1497","https://github.com/igniterealtime/Openfire/commit/c2ccb38250910587498597955d0bbee8b58e46df","https://github.com/igniterealtime/Openfire","https://swarm.ptsecurity.com/openfire-admin-console"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mfjw-x4q4-69p9","url":"https://osv.dev/vulnerability/GHSA-mfjw-x4q4-69p9"}],"summary":"Ignite Realtime Openfire vulnerable to Server Side Request Forgery"}