TI-2023-20860 CVE-2023-39967
Full read and controlled SSRF through URL parameter when testing a request inside wiremock-studio
Priority HIGH 82
WireMock is a tool for mocking HTTP services.
wiremock
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
wiremock records in CISA KEVNo wiremock vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2018-06620 CVE-2018-9116 · GHSA-xf3g-mqgg-66g3
An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated…
Priority MEDIUM 43
An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and internal resources and potentially cause a Denial of Service.
TI-2023-21929 CVE-2023-41329 · GHSA-pmxq-pj47-j8j4
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio
Priority LOW 30
WireMock is a tool for mocking HTTP services.
TI-2018-06621 CVE-2018-9117 · GHSA-wf78-3ph3-fqwr
WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated…
Priority LOW 29
WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated attacker to access local files beyond the application directory via a specially crafted XML request, aka Directory Traversal.
TI-2023-27375 CVE-2023-50069 · GHSA-qhjx-8fqw-x3cm
WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site…
Priority LOW 28
WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature.
TI-2023-21927 CVE-2023-41327 · GHSA-hq8w-9w8w-pmx7
Controlled SSRF through URL in the WireMock
Priority LOW 25
WireMock is a tool for mocking HTTP services.