Ignite Realtime Openfire through 4.4.2 is vulnerable to local file inclusion via PluginServlet.java. It does not ensure that retrieved files are located under the Openfire home directory.
View the template here CVE-2019-18393.yaml
References:
https://github.com/igniterealtime/Openfire/pull/1498