Cross-site scripting in Openfire - CVE-2015-6972

Vulnerability details

Vulnerability allows a remote attacker to perform XSS attacks.

The vulnerability is caused by an input validation error when processing data passed via the "groupchatName" parameter to plugins/clientcontrol/create-bookmark.jsp, via the "urlName" parameter to plugins/clientcontrol/create-bookmark.jsp, via the  "hostname" parameter to server-session-details.jsp, and via the  "search" parameter to group-summary.jsp. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in victim's browser in security context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Affected software

How to mitigate CVE-2015-6972

Links to Public Exploits and PoC-codes

• Exploit #1449 - Openfire 3.10.2 - Multiple Cross-Site Scripting Vulnerabilities (March 18, 2020)

External References

• http://hyp3rlinx.altervista.org/advisories/AS-OPENFIRE-XSS.txt
• http://packetstormsecurity.com/files/133558/Openfire-3.10.2-Cross-Site-Scripting.html
• https://security.gentoo.org/glsa/201612-50
• https://www.exploit-db.com/exploits/38191/

Related Security Bulletins

• Multiple vulnerabilities in Openfire
• Arch Linux update for openfire
• Gentoo update for Openfire