Vulnerabilities

TI-2023-20860 CVE-2023-39967

Full read and controlled SSRF through URL parameter when testing a request inside wiremock-studio

HIGH 82

WireMock is a tool for mocking HTTP services.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01047 Published 2023-09-06 No fix listed CWE-918

TI-2023-21927 CVE-2023-41327 · GHSA-hq8w-9w8w-pmx7

LOW 25

WireMock is a tool for mocking HTTP services.

CVSS 3.1MEDIUM 5.4 Adjacent network No auth No interaction EPSS 0.00498 Published 2023-09-06 Fixed in 3.0.3, 2.35.1 CWE-918

TI-2023-21929 CVE-2023-41329 · GHSA-pmxq-pj47-j8j4

LOW 30

WireMock is a tool for mocking HTTP services.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00629 Published 2023-09-06 Fixed in 3.0.3, 2.35.1 +1 CWE-290