Users In Another Domain Could Set The vCard of an Openfire User

Description

Currently, when a vCard set is received no checking is done on the domain of the sending user to ensure that the user submitting a request is a local user. This needs to be done so that the vCard of the local user cannot be overwritten by a user of another domain.

Environment

None
Fixed

Assignee

Alex Wenckus

Reporter

Alex Wenckus