wireapp wire-server vulnerabilities

CVEs per yearBy the year they were published

1. 20213
2. 20223
3. 20231

Newest CVEs

• CVE-2023-22737

  wire-server vulnerable to unauthorized removal of Bots from Conversations

  wireapp · wire-server

  Medium6.5
• CVE-2022-31122

  Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation

  wireapp · wire-server

  Critical9.8
• CVE-2021-41119

  DoS vulnerabiliity in wire-server json parser

  wireapp · wire-server

  Medium5.3
• CVE-2022-23610

  Improper Verification of Cryptographic Signature in wire-server

  wireapp · wire-server

  Critical9.1
• CVE-2021-41100

  Account takeover when having only access to a user's short lived token in wire-server

  wireapp · wire-server

  High7.4
• CVE-2021-41101

  CORS `Access-Control-Allow-Origin` settings are too lenient

  wireapp · wire-server

  Medium5.7
• CVE-2021-21396

  Bulk list client endpoint exposes too much metadata about a client

  wireapp · wire-server

  Medium6.5