CVE-2020-35127: Cross-site Scripting

December 11, 2020

Ignite Realtime Openfire suffers from a Stored Cross-Site Scripting vulnerability in plugins/bookmarks/create-bookmark.jsp.

References

discourse.igniterealtime.org/t/openfire-4-6-0-has-stored-xss-vulnerabilities/89276
nvd.nist.gov/vuln/detail/CVE-2020-35127

Detect and mitigate CVE-2020-35127 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →