<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wireapp-wire-server</title><description>Every new CVE for wireapp-wire-server.</description><link>https://agentprime.io/</link><item><title>CVE-2023-22737: wire-server vulnerable to unauthorized removal of Bots from Conversations</title><link>https://agentprime.io/advisories/CVE-2023-22737/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22737/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Jan 2023 23:14:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-31122: Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation</title><link>https://agentprime.io/advisories/CVE-2022-31122/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-31122/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-41119: DoS vulnerabiliity in wire-server json parser</title><link>https://agentprime.io/advisories/CVE-2021-41119/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41119/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Apr 2022 18:25:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-23610: Improper Verification of Cryptographic Signature in wire-server</title><link>https://agentprime.io/advisories/CVE-2022-23610/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23610/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Mar 2022 17:40:10 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-41100: Account takeover when having only access to a user&apos;s short lived token in wire-server</title><link>https://agentprime.io/advisories/CVE-2021-41100/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41100/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 04 Oct 2021 18:25:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41101: CORS `Access-Control-Allow-Origin` settings are too lenient</title><link>https://agentprime.io/advisories/CVE-2021-41101/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41101/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Sep 2021 19:20:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21396: Bulk list client endpoint exposes too much metadata about a client</title><link>https://agentprime.io/advisories/CVE-2021-21396/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21396/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Mar 2021 21:40:15 GMT</pubDate><category>CVE</category></item></channel></rss>