Medium severity6.1NVD Advisory· Published Sep 2, 2020· Updated Jun 17, 2026
CVE-2020-24601
CVE-2020-24601
Description
In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certificate trusted page
Affected products
4cpe:2.3:a:igniterealtime:openfire:4.5.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:igniterealtime:openfire:4.5.1:*:*:*:*:*:*:*
- (no CPE)range: 4.5.1
- Ignite Realtime/Openfiredescription
Patches
Vulnerability mechanics
References
2- cybersecurityworks.com/zerodays/cve-2020-24601-ignite-realtime-openfire.htmlnvdExploitThird Party Advisory
- issues.igniterealtime.org/browse/OF-1963nvdVendor Advisory
News mentions
0No linked articles in our index yet.