ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.igniterealtime.openfire:parent(Maven) | 0 | 3.5.0 | N/A |
| org.igniterealtime.openfire:openfire(Maven) | 0 | 3.5.0 | N/A |
CVSS Metrics
