VYPR

User Import Export

by Igniterealtime

CVEs (1)

  • CVE-2017-2815HigMay 15, 2018
    risk 0.53cvss 8.1epss 0.01

    An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this…