CVE-2023-32315: Ignite Realtime Openfire Path Traversal Vulnerability.

Ignite Realtime Openfire Path Traversal Vulnerability. Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.

• CISA KEV-listed (remediation due 2023-09-14)
• EPSS 100.0% (100.0% percentile)
• CVSS 8.6 high

Related briefings

• New SharkLoader malware hits diplomats and governments with Cobalt Strike 2026-06-24

Linked threat actors

• APT10
• Mustang Panda

Browse the CVE database

Read the full analysis on IntelFusions