4.8med
CVE-2017-15911
Ignite Realtime Openfire Server has Cross-site Scripting vulnerability in admin console
Also known as GHSA-v3h2-4j2r-wqj8
Published 9 y ago · modified 4 mo ago · JSON
CVSS
4.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 54%
Public exploits
0
none known
Summary
The Admin Console in Ignite Realtime Openfire Server before 4.1.7 allows arbitrary client-side JavaScript code execution on victims who click a crafted setup/setup-host-settings.jsp?domain= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application.
Exploit prediction (EPSS)
0.73% probability of exploitation in the next 30 days, higher than 54% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 4.8 | CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
| NVD | 2.0 | 3.5 | AV:N/AC:M/Au:S/C:N/I:P/A:N |
| GitHub | 3.0 | 4.8 | CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.igniterealtime.openfire:parent | <4.1.7 | 4.1.7 |
Classification
- Weakness
- CWE-79 Improper Neutralization of Input During Web Page Generation
References
- becomepentester.blogspot.ae /2017/10/Cross-Site-Scripting-Openfire-4.1.6-CVE-2017-15911.html · x_refsource_MISC, x_transferred
- issues.igniterealtime.org /browse/OF-1417 · x_refsource_MISC, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2017-15911 · advisory
Sources
- CVE List: CVE-2017-15911
- GitHub Advisory: GHSA-v3h2-4j2r-wqj8
- NVD: CVE-2017-15911
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.