Skip to content
OpenAdvisories

Product · wireapp

wire-server

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-31122

    Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation

    Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to Token Recipient Confusion. If an attacker has certain details of SAML IdP metadata, and configures their own SAML on the same backend, the …

    wireapp wire-server
  • Critical 9.1
    CVE-2022-23610

    Improper Verification of Cryptographic Signature in wire-server

    wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-01-27 release, it was possible to craft DSA Signatures to bypass SAML SSO and impersonate any Wire user with SAML credentials. In teams wit…

    wireapp wire-server