← Database

CVE-2008-6511

MEDIUM CVSS: 5.8 Published: 2009-03-23 Modified: 2026-06-16

Description

Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.

Affected Platforms

Igniterealtime Openfire

Weakness Type

CWE-20

References