CVE-2009-0497
published 2009-02-10CVE-2009-0497: Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in…
PriorityP337medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
8.13%
94.1th percentile
Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the log parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| igniterealtime | openfire | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/33452http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/web/log.jsphttp://www.coresecurity.com/content/openfire-multiple-vulnerabilitieshttp://www.securityfocus.com/archive/1/499880/100/0/threadedhttp://www.securityfocus.com/bid/32945https://bugs.gentoo.org/show_bug.cgi?id=257585https://exchange.xforce.ibmcloud.com/vulnerabilities/47806http://secunia.com/advisories/33452http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/web/log.jsphttp://www.coresecurity.com/content/openfire-multiple-vulnerabilitieshttp://www.securityfocus.com/archive/1/499880/100/0/threadedhttp://www.securityfocus.com/bid/32945https://bugs.gentoo.org/show_bug.cgi?id=257585https://exchange.xforce.ibmcloud.com/vulnerabilities/47806
2009-02-10
Published