exploitDog

CVE-2024-25421

Опубликовано: 26 мар. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

Ссылки

https://github.com/igniterealtime/Openfire/blob/main/xmppserver/src/main/java/org/jivesoftware/openfire/muc/spi/LocalMUCRoomManager.java
Product
https://www.hackthebox.com/blog/openfire-cves-explained-CVE-2024-25420-CVE-2024-25421
Exploit
Third Party Advisory
https://www.igniterealtime.org/projects/openfire/
Product
Release Notes
https://github.com/igniterealtime/Openfire/blob/main/xmppserver/src/main/java/org/jivesoftware/openfire/muc/spi/LocalMUCRoomManager.java
Product
https://www.hackthebox.com/blog/openfire-cves-explained-CVE-2024-25420-CVE-2024-25421
Exploit
Third Party Advisory
https://www.igniterealtime.org/projects/openfire/
Product
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*

Версия до 4.9.0 (включая)

EPSS

Процентиль: 85%

0.02557

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-250

Связанные уязвимости

GHSA-6pwg-gg6j-5crm

github

почти 2 года назад

Ignite Realtime Openfire privilege escalation vulnerability

EPSS

Процентиль: 85%

0.02557

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-250