Ignite Realtime User Import Export Plugin 2.6.0 for Openfire
Approved changes feed: RSS · Atom
cpe:2.3:a:igniterealtime:user_import_export:2.6.0:*:*:*:*:openfire:*:*
part: a version: 2.6.0 update: *
| Vendor | Igniterealtime (ebb69505-0c1d-5b48-b68e-f7064b76d233) |
|---|---|
| Product | User Import Export (31a75a2a-7e11-54ab-8b71-54c30d61f98b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | openfire |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/igniterealtime/openfire-userimportexport-plugin |
purl2cpe | 2026-06-01 10:13:44.314892 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-2815 |
vulnerable | 2026-06-08 05:09:26.012156 |
Details available
HIGH (8.1)
An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.
Published: 2018-05-15T17:00:00.000Z
Updated: 2024-08-05T14:02:07.787Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.