CVE-2024-25421: An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

PriorityP259critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.65%

73.6th percentile

An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
igniterealtime	openfire	<= 4.9.0	—

Detection & IOCsextracted from sources · hover to see the quote

→Privilege escalation attempts targeting the ROOM_CACHE component in Ignite Realtime Openfire v4.9.0 and before should be monitored for suspicious activity. ↗

·CVE-2024-25421 affects Openfire versions 4.9.0 and earlier (component: org.igniterealtime.openfire:xmppserver). A fix is available; upgrade beyond 4.9.0 to remediate. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.