Security Advisory
CVE-2019-18394
9.8
CRITICAL
Vulnerability Description
A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.
Published Date
October 24, 2019
Official Source
NIST NVD Advisory