CVE-2023-39967
published 2023-09-06CVE-2023-39967: WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request…
PriorityP262critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
EPSS
0.83%
52.9th percentile
WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock’s instance. There are 3 identified potential attack vectors: via “TestRequester” functionality, webhooks and the proxy mode. As we can control HTTP Method, HTTP Headers, HTTP Data, it allows sending requests with the default level of credentials for the WireMock instance. The vendor has discontinued the affected Wiremock studio product and there will be no fix. Users are advised to find alternatives.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| wiremock | studio | <= 2.32.0-17 | — |
| wiremock | wiremock | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
WireMock Controlled Server Side Request Forgery vulnerability through URL
osv·2023-09-06
CVE-2023-41327 [MEDIUM] WireMock Controlled Server Side Request Forgery vulnerability through URL
WireMock Controlled Server Side Request Forgery vulnerability through URL
### Impact
WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where the allowed list is evaluated first. [Documentation](https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses).
Until WireMock Webhooks Extension [3.0.0-beta-15](https://github.com/wiremock/wiremock/releases/tag/3.0.0-beta-15), the filtering of target addresses from the proxy mode DID NOT work for Webhooks, so the users were potentially vulnerable regardless of the `limitProxyTargets` settings.
Via the WireMock webhooks configuration, POST requests from a webho
GHSA
WireMock Controlled Server Side Request Forgery vulnerability through URL
ghsa·2023-09-06
CVE-2023-41327 [MEDIUM] CWE-918 WireMock Controlled Server Side Request Forgery vulnerability through URL
WireMock Controlled Server Side Request Forgery vulnerability through URL
### Impact
WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where the allowed list is evaluated first. [Documentation](https://wiremock.org/docs/configuration/#preventing-proxying-to-and-recording-from-specific-target-addresses).
Until WireMock Webhooks Extension [3.0.0-beta-15](https://github.com/wiremock/wiremock/releases/tag/3.0.0-beta-15), the filtering of target addresses from the proxy mode DID NOT work for Webhooks, so the users were potentially vulnerable regardless of the `limitProxyTargets` settings.
Via the WireMock webhooks configuration, POST requests from a webho
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-09-06
Published