Lucene search

K

Wiremock Security Vulnerabilities

cve
cve

CVE-2023-50069

WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render on the Matched page in the Body...

6.1CVSS

6AI Score

0.001EPSS

2023-12-29 09:15 PM
11
cve
cve

CVE-2023-41329

WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names, and in such a...

6.6CVSS

6.4AI Score

0.001EPSS

2023-09-06 09:15 PM
40
cve
cve

CVE-2023-41327

WireMock is a tool for mocking HTTP services. WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where the allowed list is evaluated first. Until WireMock...

5.4CVSS

6.2AI Score

0.001EPSS

2023-09-06 09:15 PM
2346
cve
cve

CVE-2023-39967

WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock’s instance. There are 3 identified potential attack vectors: via...

10CVSS

9.4AI Score

0.001EPSS

2023-09-06 09:15 PM
22
cve
cve

CVE-2018-9117

WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated attacker to access local files beyond the application directory via a specially crafted XML request, aka Directory...

5.3CVSS

5.2AI Score

0.002EPSS

2018-03-29 07:29 AM
23
cve
cve

CVE-2018-9116

An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and internal resources and potentially cause a Denial of...

9.1CVSS

8.9AI Score

0.004EPSS

2018-03-29 07:29 AM
21