Skip to content
OpenAdvisories

Product · wireapp

wire-webapp

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2021-32683

    XSS through createObjectURL

    wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is instructed to open an image in a new tab (right click -> open in new tab, or co…

    wireapp wire-webapp
  • High 7.1
    CVE-2021-21400

    Entering code in App Lock modal sends input to conversation

    wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock passphrase, the typed passphrase will be sent into the most recently used chat …

    wireapp wire-webapp