Over 3,000 Openfire servers vulnerable to takover attacks

Thousands of Openfire servers remain vulnerable to CVE-2023-32315, an actively exploited and path traversal vulnerability that allows an unauthenticated user to create new admin accounts. [...]

accounts actively exploited admin attacks cve exploited openfire path path traversal security servers unauthenticated vulnerability vulnerable