Related VulnerabilitiesPoCOpenfire /getFavicon 服务端请求伪造漏洞(CVE-2019-18394)CVE-2019-18394: Openfire Full Read SSRFPoCCVE-2019-18393: Ignite Realtime Openfire <4.42 - Local File InclusionPoCCVE-2019-18394: Ignite Realtime Openfire <=4.4.2 - Server-Side Request ForgeryPoCCVE-2023-32315: Openfire Administration Console - Authentication BypassPoCCVE-2023-32315-2: Openfire身份认证绕过漏洞PoCCVE-2023-32315: Openfire Console authentication bypassPoCopenfire-default-password: OpenFire 默认账号密码PoCopenfire-setup: Openfire Setup - ExposureIgnite Realtime Openfire <=4.4.2存在服务端请求伪造漏洞(CVE-2019-18394)Openfire CVE-2019-18394 未授权服务器端请求伪造漏洞Openfire Console 存在弱口令Openfire Console 存在鉴权绕过漏洞