CVE-2025-48066
- EPSS 0.01%
- Veröffentlicht 22.05.2025 17:20:26
- Zuletzt bearbeitet 30.05.2025 01:18:41
wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an issue with function to delete local data. Instructing the client to delete its local database on user logout does not result in de...
CVE-2022-39380
- EPSS 0.06%
- Veröffentlicht 27.01.2023 21:15:10
- Zuletzt bearbeitet 21.11.2024 07:18:10
Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certain combinations of Markdown formatting can trigger an unhandled error in the conversion to ...
CVE-2022-29168
- EPSS 0.61%
- Veröffentlicht 25.06.2022 07:15:07
- Zuletzt bearbeitet 21.11.2024 06:58:37
Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering `@mentions` in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injecte...
CVE-2022-24799
- EPSS 0.59%
- Veröffentlicht 20.04.2022 18:15:10
- Zuletzt bearbeitet 21.11.2024 06:51:07
wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and executing arbitrary HTML code and thus also JavaScript....
CVE-2022-23605
- EPSS 0.06%
- Veröffentlicht 04.02.2022 23:15:15
- Zuletzt bearbeitet 21.11.2024 06:48:54
Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemera...
CVE-2021-32683
- EPSS 0.35%
- Veröffentlicht 15.06.2021 20:15:13
- Zuletzt bearbeitet 21.11.2024 06:07:31
wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is instructed to open an image in a new tab (right click -> open in new t...
CVE-2021-21400
- EPSS 0.42%
- Veröffentlicht 02.04.2021 15:15:13
- Zuletzt bearbeitet 21.11.2024 05:48:16
wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock passphrase, the typed passphrase will be sent into the most recently u...