Executive brief
Openfire has potential identity spoofing issue via unsafe CN parsing
Affected products
- Maven org.igniterealtime.openfire:xmppserver
Junglewise Threat Intelligence
CVE-2025-59154 · Severity: low · CVSS 3.1 · Published 2025-09-16
Technologies: org.igniterealtime.openfire:xmppserver (Maven). Vendors: Maven.
Openfire has potential identity spoofing issue via unsafe CN parsing