CVE-2023-41329

🗓️ 06 Sep 2023 20:34:46Reported by MendType

DNS rebinding in WireMock proxy mode allows requests to prohibited domains.

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of the WireMock software for creating virtual HTTP services relates to bypassing authentication through spoofing, allowing attackers to circumvent established access controls.	30 Oct 202300:00	–	bdu_fstec
CNNVD	WireMock security vulnerability	6 Sep 202300:00	–	cnnvd
CVE	CVE-2023-41329	6 Sep 202320:34	–	cve
Cvelist	CVE-2023-41329 Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio	6 Sep 202320:34	–	cvelist
EUVD	EUVD-2023-2564	3 Oct 202520:07	–	euvd
Github Security Blog	Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes	8 Sep 202312:19	–	github
NVD	CVE-2023-41329	6 Sep 202321:15	–	nvd
OSV	BIT-WIREMOCK-2023-41329 Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio	13 Apr 202616:00	–	osv
OSV	GHSA-PMXQ-PJ47-J8J4 Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes	8 Sep 202312:19	–	osv
OSV	PYSEC-2026-2050 Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes	7 Jul 202611:45	–	osv

Vulners

Node

wiremock wiremockRange3.0.0-beta-11–3.0.3

wiremock wiremockRange1.0.0–2.6.1

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41329.json
wiremock	www.wiremock.org/docs/configuration/
github	www.github.com/advisories/GHSA-pmxq-pj47-j8j4
github	www.github.com/wiremock/wiremock
github	www.github.com/wiremock/wiremock/security/advisories/GHSA-pmxq-pj47-j8j4
pypi	www.pypi.org/project/wiremock
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-41329

06 Oct 2026 02:43Current

CVSS 42

CVSS 3.13.9 - 6.6

EPSS0.00629

SSVC