CVE-2019-15488: XSS
Published Aug 23, 2019
·Updated
Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.
Affected Software
1 affected component
igniterealtime Openfire<4.4.1
Remediation
Patch Available
Event History
Aug 23, 2019
CVE Published
via MITRE·12:37 PM
Data Sourced
via MITRE·12:37 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15488?
CVE-2019-15488 has a medium severity rating due to its potential for reflected XSS attacks.
2
How do I fix CVE-2019-15488?
To fix CVE-2019-15488, upgrade Openfire to version 4.4.1 or later.
3
What type of vulnerability is CVE-2019-15488?
CVE-2019-15488 is a reflected cross-site scripting (XSS) vulnerability.
4
What versions of Openfire are affected by CVE-2019-15488?
Openfire versions prior to 4.4.1 are affected by CVE-2019-15488.
5
What impact can CVE-2019-15488 have on users?
CVE-2019-15488 can allow attackers to execute malicious scripts in the context of a user's session.