With the current implementation, any user can send the register IQ to register with a room as a 'member'. This also allows outcasts, that were banned from a room, to be able to register again as a member, and eventually re-join the room. The solution is to prevent outcasts from registering with the room.
https://github.com/igniterealtime/Openfire/pull/541
With the current implementation, any user can send the register IQ to register with
a room as a 'member'. This also allows outcasts, that were banned from a room, to be
able to register again as a member, and eventually re-join the room. The solution is
to prevent outcasts from registering with the room.