CVE-2023-39967criticalCWE-918

CVE-2023-39967: fallo crítico en wiremock

Full read and controlled SSRF through URL parameter when testing a request inside wiremock-studio

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear wiremock

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 10epss 1.0%
WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock’s instance. There are 3 identified potential attack vectors: via “TestRequester” functionality, webhooks and the proxy mode. As we can control HTTP Method, HTTP Headers, HTTP Data, it allows sending requests with the default level of credentials for the WireMock instance. The vendor has discontinued the affected Wiremock studio product and there will be no fix. Users are advised to find alternatives.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
wiremock · wiremock
CVEs relacionadas — wiremock

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-41329LOWDomain restrictions bypass via DNS Rebinding in WireMock and WireMock StudioEPSS 0.6%CVE-2023-41327MEDIUMControlled SSRF through URL in the WireMockEPSS 0.5%