Any plans to address CVE-2024-25420 & CVE-2024-25421?

Openfire
1

NVD - CVE-2024-25420
Description: An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.

NVD - CVE-2024-25421
Description: An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

Openfire CVEs explained (CVE-2024-25420 & CVE-2024-25421)

2

Thanks, I have filed them here

https://igniterealtime.atlassian.net/browse/OF-2894

https://igniterealtime.atlassian.net/browse/OF-2895

3

Both of these issues have been resolved in Openfire 4.8.1.