{"cvss":0.0,"datePublished":"2024-04-08T00:00:00Z","dateUpdated":"2024-04-08T00:00:00Z","description":"PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.","dueDate":"","id":"CVE-2019-18393","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Openfire","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Ignite Realtime Openfire Improper Limitation of a Pathname to a Restricted Directory","vendor":"Ignite Realtime"}