Advisories · Technology

wireapp wire-webapp.

Every CVE that names wireapp wire-webapp among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48066 CVE record

CVSS 6.0 Medium

wire-webapp has no database deletion on client logout
- wireapp wire-webapp
- CWE-226
Not analysed yet 22 May 2025
CVE-2025-48061 CVE record

CVSS 5.6 Medium

wire-webapp Has Insufficient Session Invalidation after User Logout
- wireapp wire-webapp
- Authentication bypass
Not analysed yet 22 May 2025
CVE-2022-39380 CVE record

CVSS 5.3 Medium

wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering
- wireapp wire-webapp
- CWE-755
Not analysed yet 27 Jan 2023
CVE-2022-29168 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross Site Scripting in Wire Messages
- wireapp wire-webapp
- Cross-site scripting (XSS)
Not analysed yet 25 Jun 2022
CVE-2022-24799 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross Site Scripting in Wire Webapp
- wireapp wire-webapp
- Cross-site scripting (XSS)
Not analysed yet 20 Apr 2022
CVE-2022-23605 CVE record

CVSS 4.4 Medium

Expired Ephemeral Messages not reliably removed in wire-webapp
- wireapp wire-webapp
- CWE-212
Not analysed yet 4 Feb 2022
CVE-2021-32683 CVE record

CVSS 8.8 High

XSS through createObjectURL
- wireapp wire-webapp
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2021
CVE-2021-21400 CVE record

CVSS 7.1 High

Entering code in App Lock modal sends input to conversation
- wireapp wire-webapp
- Information disclosure
Not analysed yet 2 Apr 2021