Exploit for Path Traversal in Igniterealtime Openfire

githubexploit · 2025-04-14

Description

Exploit CVE-2023-32315 allows bypassing Openfire web admin login and adding malicious user.

Entry point

Parametercsrf · path

Path/setup/setup-s/%u002e%u002e/%u002e%u002e/user-groups.jsp

Path traversal in Openfire setup environment to access restricted admin pages.

Affected Igniterealtime Openfire versions

Igniterealtime Openfire< 4.6.8, 4.7.5

All known vulnerabilities by product

Openfire Red Os

CVSS 8.6 for CVE-2023-32315

8.6

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:LOW

Availability:LOW

Working code

94%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-06-26

Exploit Details

Modified:2025-06-27 01:12

Last Seen:2025-08-31 22:34

Reporter:pulentoski

Written in:Python

Last commit:2026-07-10

Tags

cve-2023-32315 exploit path traversal openfire vulnerability admin access malicious plugin

Other exploits for CVE-2023-32315

ghost-bits-toolkit

2026-06-19 v1c0mmrtGITHUB

Exploit for Path Traversal in Igniterealtime Openfire

2025-09-04 rag-fishGITHUB

Exploit for Path Traversal in Igniterealtime Openfire

2025-04-14 pulentoskiGITHUB

Exploit for Path Traversal in Igniterealtime Openfire

2025-01-30 asepsaepdinGITHUB

Exploit for Path Traversal in Igniterealtime Openfire

2023-12-15 K3ysTr0K3RGITHUB

Openfire authentication bypass with RCE plugin

2023-07-19 h00die-gr3y <h00die.gr3y@gmail.com>METASPLOITRuby

Openfire Authentication Bypass / Remote Code Execution Exploit

2023-07-19 metasploitZDTRuby

Openfire Authentication Bypass / Remote Code Execution

2023-07-19 h00die-gr3y, metasploit.comPACKETSTORMRuby

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=F5F18A47-4816-52A5-99E1-F93C51B493AF
It is an exploit module for Openfire, a Jabber/XMPP server. The vulnerability class/vector is not specified. The probable entry point is the `exploit.py` script. Notable dependencies/tooling include `paramiko` and `requests`. Execution context is a Python script invoked via the command line. Preconditions are a vulnerable version of Openfire. Expected impact is not specified.