org.igniterealtime.openfire:xmppserver
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Maven
- Vulnerability status
- affected by 5 advisory(ies)
Advisories (6)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-5qfv-rr79-chx5 Cross-site Scripting in Ignite Realtime Openfire | < 4.4.1 | Affected |
| GHSA-5xvc-rwv8-86p7 Ignite Realtime Openfire privilege escalation vulnerability | < 4.8.1 | Affected |
| GHSA-6pwg-gg6j-5crm Ignite Realtime Openfire privilege escalation vulnerability | < 4.8.1 | Affected |
| GHSA-gw42-f939-fhvm Administration Console authentication bypass in openfire xmppserver | 3.10.0 – < 4.6.8 ; 4.7.0 – < 4.7.5 | Not affected |
| GHSA-w252-645g-87mp Openfire has potential identity spoofing issue via unsafe CN parsing | < 5.0.2 | Affected |
| GHSA-wx2w-8pqw-vp4g Ignite Realtime Openfire allows Cross-site Scripting | < 4.4.2 | Affected |
Sources
| Source | Licence |
|---|