CVE-2023-50069

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-50069
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50069.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-50069
Aliases
Published
2023-12-29T00:00:00Z
Modified
2026-07-15T01:48:50.168678364Z
Summary
[none]
Details

WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render on the Matched page in the Body area, resulting in the execution of the payload. This occurs because the response body is not validated or sanitized.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50069.json",
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/holomekc/wiremock

Affected ranges

Type
GIT
Repo
https://github.com/holomekc/wiremock
Events
Introduced
2fc5031d697eda61a50f289c89f36ab1d989643f
Fixed
6c646ac7ce86b79e84d5da06d1e7451313c1c8a0
Database specific 
{
    "cpe": "cpe:2.3:a:wiremock:wiremock:*:*:*:*:*:*:*:*",
    "source": [
        "DESCRIPTION",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "3.2.0.0"
        },
        {
            "fixed": "3.0.4.0"
        },
        {
            "introduced": "3.0.4"
        },
        {
            "last_affected": "3.2.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/wiremock/wiremock
Events
Introduced
0315cd465e6b231f29e87d520990e336cdb0bb2e
Last affected
447699f52b7318663b5043670d3f09319c411dbc
Database specific 
{
    "cpe": "cpe:2.3:a:wiremock:wiremock:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "3.0.4"
        },
        {
            "last_affected": "3.2.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50069.json"