Maven/com.github.tomakehurst:wiremock-jre8-standalone CVE-2023-41329: low 3.9, EPSS 0.63%
Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes
Action: Upgrade com.github.tomakehurst:wiremock-jre8-standalone to 2.35.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.35.1 | - |
Fixed versions
| 2.35.1 |
Sources
- osv: GHSA-pmxq-pj47-j8j4#Maven/com.github.tomakehurst:wiremock-jre8-standalone
- https://github.com/wiremock/wiremock/security/advisories/GHSA-pmxq-pj47-j8j4
- https://nvd.nist.gov/vuln/detail/CVE-2023-41329
- https://github.com/wiremock/wiremock
- https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses
CVE-2023-41329 · published · modified · JSON