Lucene search
+L

1 matches found

OSV
OSV
added 2023/09/06 8:40 p.m.11 views

CVE-2023-39967 Full read and controlled SSRF through URL parameter when testing a request inside wiremock-studio

WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock’s instance. There are 3 identified potential attack vectors: via...

10CVSS6.9AI score0.00829EPSS
SaveExploits1References3
Rows per page
Query Builder