CVE-2022-23605
MEDIUMWire Webapp <2022-01-27-production.0 - Info Disclosure
Title source: llmDescription
Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible through the local search functionality. Any attempt to view one of these message in the chat view will then trigger the deletion. This issue only affects locally stored messages. On premise instances of wire-webapp need to be updated to 2022-01-27-production.0, so that their users are no longer affected. There are no known workarounds for this issue.
Scores
CVSS v3
4.4
EPSS
0.0006
EPSS Percentile
19.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-212
Status
published
Products (50)
wire/wire-webapp
2016-07-29-17-00
wire/wire-webapp
2016-08-04-15-44
wire/wire-webapp
2016-08-23-09-31
wire/wire-webapp
2016-08-24-10-10
wire/wire-webapp
2016-08-29-14-54
wire/wire-webapp
2016-09-08-15-38
wire/wire-webapp
2016-09-19-14-01
wire/wire-webapp
2016-09-28-14-58
wire/wire-webapp
2016-10-11-15-34
wire/wire-webapp
2016-10-18-08-10
... and 40 more
Published
Feb 04, 2022
Tracked Since
Feb 18, 2026