CVE-2020-24601: XSS
In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-24601?
CVE-2020-24601 is classified as a high severity vulnerability due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2020-24601?
To mitigate CVE-2020-24601, upgrade to Openfire version 4.5.2 or later, where the vulnerability has been addressed.
Who is affected by CVE-2020-24601?
CVE-2020-24601 affects users of Ignite Realtime Openfire version 4.5.1.
What type of vulnerability is CVE-2020-24601?
CVE-2020-24601 is a stored cross-site scripting vulnerability that allows for arbitrary URL execution.
What components are involved in the CVE-2020-24601 vulnerability?
The vulnerability in CVE-2020-24601 involves the POST parameters 'searchName' and 'alias' on the import certificate trusted page.