What happened
Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.
Affected versions
Openfire: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusProof-of-concept exploit for CVE-2023-32315. CVSS 8.6.Sploitus index2026-10-08T19:46:21+00:00CandidatePoC-in-GitHub · ohnonoyesyes/CVE-2023-32315★ 0ohnonoyesyes2023-06-14CandidatePoC-in-GitHub · tangxiaofeng7/CVE-2023-32315-Openfire-Bypassrce★ 143tangxiaofeng72023-06-14CandidatePoC-in-GitHub · 5rGJ5aCh5oCq5YW9/CVE-2023-32315exp★ 25rGJ5aCh5oCq5YW92023-06-15CandidatePoC-in-GitHub · miko550/CVE-2023-32315Openfire Console Authentication Bypass Vulnerability with RCE plugin★ 61miko5502023-06-18CandidatePoC-in-GitHub · Ap0dexMe0/CVE-2023-32315Perform With Massive Openfire Unauthenticated Users★ 7Ap0dexMe02023-07-02CandidatePoC-in-GitHub · izzz0/CVE-2023-32315-POCCVE-2023-32315-Openfire-Bypass★ 5izzz02023-07-07CandidatePoC-in-GitHub · gibran-abdillah/CVE-2023-32315Tool for CVE-2023-32315 exploitation★ 3gibran-abdillah2023-08-31CandidatePoC-in-GitHub · CN016/Openfire-RCE-CVE-2023-32315-Openfire未授权到RCE(CVE-2023-32315)复现★ 0CN0162023-10-10CandidatePoC-in-GitHub · asepsaepdin/CVE-2023-32315★ 0asepsaepdin2025-01-30CandidatePoC-in-GitHub · pulentoski/Explotacion-CVE-2023-32315-Openfire★ 1pulentoski2025-04-14CandidatePoC-in-GitHub · CyberCTF/vulhub-openfire-cve-2023-32315Vulhub openfire/CVE-2023-32315: Openfire Admin Console Authentication Bypass (CVE-2023-32315), run with Isoloom★ 0CyberCTF2026-10-08CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.