{"cvss":8.6,"datePublished":"2023-08-24","dateUpdated":"2023-08-24","description":"Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.","dueDate":"2023-09-14","id":"CVE-2023-32315","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://www.igniterealtime.org/downloads/#openfire;  https://nvd.nist.gov/vuln/detail/CVE-2023-32315","product":"Openfire","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Ignite Realtime Openfire Path Traversal Vulnerability","vendor":"Ignite Realtime"}