wiremock wiremock vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

WireMock with GUI versions 3.2.0.0 up to and including 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render ...

Wiremock Wiremock

5.4

CVSSv3

WireMock is a tool for mocking HTTP services. WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where the allowed list is evaluated first. Unt...

Wiremock Studio Wiremock Wiremock

6.6

CVSSv3

WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured using the domain names,...

Wiremock Studio Wiremock Wiremock Wiremock Python Wiremock Wiremock Wiremock Docker

10

CVSSv3

WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock’s instance. There are 3 identified pote...

Wiremock Studio

9.1

CVSSv3

An XXE vulnerability within WireMock prior to 2.16.0 allows a remote unauthenticated malicious user to access local files and internal resources and potentially cause a Denial of Service.

Wiremock Wiremock

5.3

CVSSv3

WireMock prior to 2.16.0 contains a vulnerability that allows a remote unauthenticated malicious user to access local files beyond the application directory via a specially crafted XML request, aka Directory Traversal.

Wiremock Wiremock

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook