Firetruck

CVE-2023-32315

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Openfireigniterealtime / Openfire>= 3.10.0, < 4.6.8affected
Openfireigniterealtime / Openfire>= 4.7.0, < 4.7.5affected