Approved changes feed: RSS · Atom

cpe:2.3:a:talos:open_fire_user_import_export_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTalos (e7c02545-e938-5775-90a6-6bebb73bfb47)
ProductOpen Fire User Import Export Plugin (6dd611a4-bf11-5ad6-a186-61446a9dca97)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-2815 vulnerable 2026-06-03 14:37:09.075983 Details available
HIGH (8.1)
An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.
Published: 2018-05-15T17:00:00.000Z
Updated: 2024-08-05T14:02:07.787Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.