CVE-2023-32315—Ignite Realtime Openfire Path Traversal Vulnerability

漏洞名称

Ignite Realtime Openfire Path Traversal Vulnerability

描述

Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://www.igniterealtime.org/downloads/#openfire
• https://nvd.nist.gov/vuln/detail/CVE-2023-32315

相关新闻文章

• New SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksJune 26, 2026
• BadPilot network hacking campaign fuels Russian SandWorm attacksFebruary 12, 2025
• Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ CountriesFebruary 12, 2025

相关 CWE

• CWE-22