CVE-2023-41327
1 advisory.
Maven/org.wiremock:wiremock-webhooks-extension CVE-2023-41327: medium 4.6
WireMock Controlled Server Side Request Forgery vulnerability through URL
Action: Upgrade org.wiremock:wiremock-webhooks-extension to 2.35.1 (2.x) or 3.0.3 (3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.0.3 | - |
| 2.0.0 | 2.35.1 | - |
Fixed versions
| 3.0.3 | 2.35.1 |
Sources
- osv: GHSA-hq8w-9w8w-pmx7
- https://github.com/wiremock/wiremock/security/advisories/GHSA-hq8w-9w8w-pmx7
- https://nvd.nist.gov/vuln/detail/CVE-2023-41327
- https://github.com/wiremock/wiremock
- https://github.com/wiremock/wiremock/releases/tag/2.35.1
- https://github.com/wiremock/wiremock/releases/tag/3.0.0-beta-15
- https://github.com/wiremock/wiremock/releases/tag/3.0.3
- https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses
CVE-2023-41327 · published · modified · JSON