CVE-2019-18394

Published: 2019-10-24T11:15Z

Last Modified: 2024-11-21T04:33Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt