Security Advisory

CVE-2017-2815

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-15 17:00:00

Last updated 2024-08-05 14:02:07

Assigner talos

CVSS score 8.1

State PUBLISHED

Description

An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗