CVE-2019-20364 - An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp

MEDIUM

An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp

Published Jan 8, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 1.17%

An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://cybersecurityworks.com/zerodays/cve-2019-20364-openfire.html		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10917		Advisory
https://github.com/igniterealtime/Openfire/pull/1561		x_refsource_MISCThird Party Advisory
https://issues.igniterealtime.org/browse/OF-1955		x_refsource_MISCIssue TrackingVendor Advisory