CVE-2023-50069

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-50069
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50069.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-50069
Aliases
Published
2023-12-29T21:15:08.713Z
Modified
2026-04-13T12:56:22.275782690Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render on the Matched page in the Body area, resulting in the execution of the payload. This occurs because the response body is not validated or sanitized.

References

Affected packages

Git / github.com/tomakehurst/wiremock

Affected ranges

Type
GIT
Repo
https://github.com/tomakehurst/wiremock
Events
Introduced
0315cd465e6b231f29e87d520990e336cdb0bb2e
Last affected
447699f52b7318663b5043670d3f09319c411dbc
Database specific 
{
    "versions": [
        {
            "introduced": "3.0.4"
        },
        {
            "last_affected": "3.2.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50069.json"