CVE-2020-24602

Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the…

published September 2, 2020

CVSS
—
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValue", "searchDescription", "searchDefaultValue","searchPlugin", "searchDescription" and "searchDynamic" in the Server Properties and Security Audit Viewer JSP page

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01012 · 62.9th percentile
Published
2020-09-02T14:37Z
EPSS history
Timeline
  • 02 SEP 14:37Z
    Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the…
    cvelistv5