Skip to content
OpenAdvisories

Product · wireapp

wire-webapp

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2022-29168

    Cross Site Scripting in Wire Messages

    Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering `@mentions` in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and exe…

    wireapp wire-webapp
  • Critical 9.6
    CVE-2022-24799

    Cross Site Scripting in Wire Webapp

    wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and executing arbitrary HTML code and thus also JavaScript. If a use…

    wireapp wire-webapp