VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Mar 23, 2009· Updated Apr 23, 2026

CVE-2008-6511

CVE-2008-6511

Description

Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.

Affected products

25
  • Igniterealtime/Openfire25 versions
    cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*+ 24 more
    • cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*range: <=3.6.0a
    • cpe:2.3:a:igniterealtime:openfire:2.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:2.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:2.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:igniterealtime:openfire:3.6.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.