CVE-2017-2815: XEE
An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2815?
CVE-2017-2815 is considered a high severity vulnerability due to its potential for remote file retrieval and denial of service.
How do I fix CVE-2017-2815?
To mitigate CVE-2017-2815, upgrade the OpenFire User Import Export Plugin to version 2.6.1 or later.
Who is affected by CVE-2017-2815?
CVE-2017-2815 affects users of OpenFire User Import Export Plugin version 2.6.0.
What type of attack can exploit CVE-2017-2815?
An authenticated attacker can exploit CVE-2017-2815 by sending a specially crafted web request.
What are the consequences of exploiting CVE-2017-2815?
Exploiting CVE-2017-2815 can lead to the retrieval of arbitrary files or cause a denial of service condition.