Advisories · Technology
wireapp wire-server.
Every CVE that names wireapp wire-server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
wire-server vulnerable to unauthorized removal of Bots from Conversations
- wireapp wire-server
- Broken access control
- CWE-280
- CVSS 9.8 CriticalCritical · CVSS 9+
Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation
- wireapp wire-server
- Authentication bypass
- CWE-1270
- CVSS 5.3 Medium
DoS vulnerabiliity in wire-server json parser
- wireapp wire-server
- Denial of service
- CVSS 9.1 CriticalCritical · CVSS 9+
Improper Verification of Cryptographic Signature in wire-server
- wireapp wire-server
- Weak cryptography or TLS
- CVSS 7.4 High
Account takeover when having only access to a user's short lived token in wire-server
- wireapp wire-server
- Broken access control
- CVSS 5.7 Medium
CORS `Access-Control-Allow-Origin` settings are too lenient
- wireapp wire-server
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Bulk list client endpoint exposes too much metadata about a client
- wireapp wire-server
- Information disclosure