CVE-2022-23605

CVSS V2 Low 2.1 CVSS V3 Low 2.3
Description
Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible through the local search functionality. Any attempt to view one of these message in the chat view will then trigger the deletion. This issue only affects locally stored messages. On premise instances of wire-webapp need to be updated to 2022-01-27-production.0, so that their users are no longer affected. There are no known workarounds for this issue.
Overview
  • CVE ID
  • CVE-2022-23605
  • Assigner
  • security-advisories@github.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-02-04T23:15:15
  • Last Modified Date
  • 2022-02-11T03:05:50
Weakness Enumerations
CWE URL
CWE-212 http://cwe.mitre.org/data/definitions/212.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:wire:wire-webapp:2016-07-29-17-00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-08-04-15-44:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-08-23-09-31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-08-24-10-10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-08-29-14-54:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-09-08-15-38:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-09-19-14-01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-09-28-14-58:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-10-11-15-34:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-10-18-08-10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-10-25-08-17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-10-26-18-58:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-11-03-16-09:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-11-08-15-06:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-12-01-12-57:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2016-12-13-15-12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-01-23-12-12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-02-01-14-49:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-02-17-10-10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-02-24-13-06:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-03-08-17-32:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-03-14-15-05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-03-21-11-00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-03-27-17-10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-03-28-14-23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-04-05-16-58:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-04-07-09-42:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-04-19-12-31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-04-20-15-54:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-05-03-10-29:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-05-19-16-10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-05-26-08-16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-05-26-12-03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-06-01-10-02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-06-07-15-03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-06-07-18-05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-06-22-12-18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-06-28-15-13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-07-06-12-44:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-07-06-15-48:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-07-18-12-50:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-08-03-15-19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-08-04-09-04:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-08-04-15-01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-08-08-15-09:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-08-24-10-57:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-08-31-14-21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-09-26-07-18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-09-26-13-00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-10-09-08-42:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-10-19-10-45:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-10-25-07-08:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-11-07-08-50:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-11-10-10-41:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-12-04-10-23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-12-04-13-34:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-12-07-11-13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2017-12-20-12-48:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-01-24-18-11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-02-01-10-26:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-02-16-07-54:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-03-12-11-41:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-04-06-07-28:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-04-06-09-44:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-04-09-10-16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-04-12-06-45:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-04-12-11-12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-04-12-13-37:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-04-24-14-58:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-05-04-07-18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-05-24-15-49:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-06-19-08-04:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-07-03-08-25:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-07-16-08-55:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-07-16-14-05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-07-26-08-54:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-08-06-08-03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-08-22-07-38:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-08-31-06-54:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-09-07-14-18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-09-28-11-46:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-10-02-08-03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-10-15-08-14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-10-23-12-05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-11-05-11-21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-11-15-13-14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-11-30-11-03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-12-03-11-26:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2018-12-04-14-24:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-01-02-13-10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-01-08-13-20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-01-17-15-08:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-11:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-11:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-11:staging2:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-13:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-18-11-26:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-28:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-28:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-28-15-10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-02-28-15-11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-05:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-07:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-11:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-13:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-13:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-14-11-05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-18-12-58:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-20:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-25:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-28:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-28:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-03-29-09-38:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-04-08:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-04-10-10-55:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-04-11:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-04-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-04-23:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-04-23-10-51:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-04-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-04-29:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-05-09-09-36:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-05-14:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-05-15:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-05-16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-05-16-09-26:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-05-31:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-05-31-08-18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-06-04:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-06-06-12-31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-06-20:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-06-24:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-06-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-06-26:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-07-01:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-07-02-12-29:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-07-11-13-18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-07-30:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-08-01:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-08-14:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-08-19:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-08-21:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-08-22:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-08-22:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-08-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-02:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-05:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-09:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-12:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-13:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-17:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-23:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-09-24:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-07:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-07:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-08:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-10:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-10:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-14:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-16:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-16:production1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-16:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-16:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-21:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-29:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-10-31:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-11-01:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-11-08:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-11-12:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-11-19:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-11-21:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-11-21:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-11-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-11-26:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-12-12:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2019-12-20:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-01-06:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-01-09:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-01-13:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-01-15:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-01-16:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-01-17:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-01-21:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-01-22:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-06:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-11:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-11:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-14:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-20:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-24:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-26:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-02-28:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-03-03:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-03-03:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-03-06:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-03-12:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-03-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-03-20:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-03-23:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-03-30:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-01:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-07:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-09:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-16:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-21:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-22:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-23:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-28:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-04-29:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-04:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-06:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-07:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-07:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-13:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-14:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-15:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-19:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-20:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-22:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-26:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-28:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-05-29:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-02:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-05:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-08:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-10:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-12:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-15:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-15:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-19:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-24:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-06-29:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-07-07:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-07-07:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-07-13:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-07-16:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-07-24:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-07-24:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-07-24:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-06:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-12:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-12:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-14:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-19:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-21:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-08-26:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-02:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-03:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-04:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-08:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-11:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-17:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-21:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-28:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-09-29:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-01:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-06:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-07:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-07:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-08:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-14:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-15:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-21:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-21:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-26:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-10-28:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-11-09:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-11-30:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-11-30:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-12-10:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2020-12-14:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-01-18:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-01-18:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-01-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-02-02:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-02-03:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-02-04:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-02-15:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-02-17:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-02-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-02-22:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-02-26:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-03-04:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-03-05:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-03-10:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-03-15:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-03-18:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-03-24:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-03-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-04-01:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-04-06:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-04-15:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-04-26:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-04-28:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-05-06:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-05-10:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-05-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-06-01:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-06-17:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-07-09:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-07-26:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-07-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-03:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-04:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-09:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-17:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-25:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-30:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-08-30:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-03:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-06:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-06:staging1:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-06:staging2:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-06:staging3:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-08:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-09:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-10:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-13:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-13:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-20:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-22:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-27:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-29:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-09-30:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-10-02:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-10-04:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-10-13:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-10-20:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-10-27:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-11-01:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-11-25:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-12-01:production0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-12-01:staging0:*:*:*:*:*:* 1 OR
cpe:2.3:a:wire:wire-webapp:2021-12-02:production0:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:P/I:N/A:N
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • NONE
  • Availability Impact
  • NONE
  • Base Score
  • 2.1
  • Severity
  • LOW
  • Exploitability Score
  • 3.9
  • Impact Score
  • 2.9
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
  • Attack Vector
  • LOCAL
  • Attack Compatibility
  • LOW
  • Privileges Required
  • HIGH
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • LOW
  • Availability Impact
  • NONE
  • Base Score
  • 2.3
  • Base Severity
  • LOW
  • Exploitability Score
  • 0.8
  • Impact Score
  • 1.4
References
Reference URL Reference Tags
https://github.com/wireapp/wire-webapp/commit/42c9a1edddbdd5d4d8f9a196a98f6fc19bb21741 Patch Third Party Advisory
https://github.com/wireapp/wire-webapp/security/advisories/GHSA-2w3m-ppfg-hg62 Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-23605
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23605
History
Created Old Value New Value Data Type Notes
2022-05-10 06:33:04 Added to TrackCVE
2022-12-06 08:42:58 2022-02-04T23:15Z 2022-02-04T23:15:15 CVE Published Date updated
2022-12-06 08:42:58 2022-02-11T03:05:50 CVE Modified Date updated
2022-12-06 08:42:58 Analyzed Vulnerability Status updated