Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Openfire Path Traversal (CVE-2023-32315) - Vulnerability Database

Openfire Path Traversal (CVE-2023-32315)

Description

Invicti determined that it was possible to access Openfire's administrative endpoints without authentication due to the path traversal vulnerability.

Remediation

Upgrade to the latest version of Openfire

References

Administration Console authentication bypass in openfire xmppserver

Related Vulnerabilities

CData Jetty Path Traversal (CVE-2024-31848/CVE-2024-31849/CVE-2024-31850/CVE-2024-31851) Critical
Common tags: Directory Traversal Authentication Bypass Known Vulnerabilities
Apache OFBiz Authentication Bypass (CVE-2023-51467) Critical
Common tags: Authentication Bypass Known Vulnerabilities
Liferay JSON service API authentication vulnerability High
Common tags: Authentication Bypass Known Vulnerabilities
Cacti Unauthenticated Command Injection (CVE-2022-46169) Critical
Common tags: Authentication Bypass Known Vulnerabilities
Telerik Report Server Authentication Bypass Vulnerability Critical
Common tags: Authentication Bypass Known Vulnerabilities

Severity

High

Classification

CVE-2023-32315
CWE-22
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Tags

Directory Traversal
Authentication Bypass
Known Vulnerabilities