{"id":"CVE-2019-15488","published":"2019-08-23T12:37:31Z","modified":"2024-08-05T00:49:13Z","title":"Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test","vendor":null,"product":null,"tier":"tail","description":{"text":"Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00905,"percentile":0.59681,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/igniterealtime/Openfire/compare/cd0a573...5e5d9e5","tags":["x_refsource_MISC"]},{"url":"https://github.com/igniterealtime/Openfire/pull/1441","tags":["x_refsource_MISC"]}],"priority":{"score":11.9,"factors":[{"name":"EPSS percentile","points":11.94}]},"affected":[{"ecosystem":"Maven","package":"org.igniterealtime.openfire:xmppserver","vulnerableRanges":["<4.4.1"],"patched":["4.4.1"],"from":["GHSA-5qfv-rr79-chx5"],"provenance":"source"}],"euvd":{"id":"EUVD-2019-0622","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2019-15488","published":"2019-08-23","fixed":"4.4.1","kev":false},{"cve":"CVE-2019-20528","published":"2020-03-18","fixed":"4.4.2","kev":false,"link":{"from":"CVE-2019-15488","to":"CVE-2019-20528","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.igniterealtime.openfire:xmppserver","fromFixed":"4.4.1","toFixed":"4.4.2","daysApart":208}]}},{"cve":"CVE-2023-32315","published":"2023-05-26","fixed":"4.7.5","kev":true},{"cve":"CVE-2024-25420","published":"2024-03-26","fixed":"4.8.1","kev":false}],"package":"Maven:org.igniterealtime.openfire:xmppserver"}}