Non évaluée
PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a...
CVE-2019-18393
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- patch github.com
- web swarm.ptsecurity.com