Maven/org.wiremock:wiremock-standalone CVE-2023-41329: low 3.9, EPSS 0.63%
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Action: Upgrade org.wiremock:wiremock-standalone to 3.0.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.3 | - |
Fixed versions
| 3.0.3 |
Sources
- osv: GHSA-pmxq-pj47-j8j4#Maven/org.wiremock:wiremock-standalone
- https://github.com/wiremock/wiremock/security/advisories/GHSA-pmxq-pj47-j8j4
- https://nvd.nist.gov/vuln/detail/CVE-2023-41329
- https://github.com/wiremock/wiremock
- https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses
CVE-2023-41329 · published · modified · JSON