Cve-2020-3495 vulnerability

kanth.vishal · September 9, 2020, 11:56am

Hi,
Any idea if recently issued vulnerability of cisco jabber that cve-2020-3495 impacts openfire as well, because this is related to XMPP for remote code execution .

guus · September 9, 2020, 12:21pm

The vulnerability that you mention relates to client software. Openfire is not.

Spark is an XMPP client. The CVE does not include enough details for me to verify if Spark is affected. These kind of issues are often highly specific to the implementation though.

kanth.vishal · September 11, 2020, 5:42am

Thanks for that update