Skip to content
OpenAdvisories

Vendor

wiremock

3 known vulnerabilities.

Products

wiremock 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2023-39967

    Full read and controlled SSRF through URL parameter when testing a request inside wiremock-studio

    WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock’s instance. There are 3 identified …

    wiremock wiremock