Wireapp vulnerabilities
We track 3 vulnerabilities in Wireapp products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 20, 2023.
Latest Wireapp vulnerabilities
- 8.8 High severity
wire-avs: Use of Externally-Controlled Format String
wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Prior to versions 9.2.22 and 9.3.5, a remote format string vulnerability could potentially allow an attacker to cause a denial of service or possibly ex
- 8.1 High severity
wire-server: Improper Authentication
Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to Token Recipient Confusion. If an attacker has certain details of SAML IdP metadata, and configures their own SAML on the same backend, the a
- 8.1 High severity
wire-server: Improper Verification of Cryptographic Signature
wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-01-27 release, it was possible to craft DSA Signatures to bypass SAML SSO and impersonate any Wire user with SAML credentials. In teams with