Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

HTTP Binding Can Allow Packets To Be Sent On Behalf Of Other Users

Description

A malicious user to set the packet's from attribute to be whatever value they choose and Openfire does not enforce this value to be correct when using HTTP binding.

Environment

None

Activity

Show:
Fixed

Details

Assignee

Reporter

Fix versions

Affects versions

Priority

Created July 6, 2007 at 3:17 AM
Updated July 6, 2007 at 3:18 AM
Resolved July 6, 2007 at 3:18 AM