Users In Another Domain Could Set The vCard of an Openfire User
Description
Currently, when a vCard set is received no checking is done on the domain of the sending user to ensure that the user submitting a request is a local user. This needs to be done so that the vCard of the local user cannot be overwritten by a user of another domain.
Currently, when a vCard set is received no checking is done on the domain of the sending user to ensure that the user submitting a request is a local user. This needs to be done so that the vCard of the local user cannot be overwritten by a user of another domain.