Skip to content

CVE-2018-9116 An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and internal resources and potentially cause a Denial of Service.

CriticalCVSS 9.1 EPSS 1.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and internal resources and potentially cause a Denial of Service.

Affected products

ProductAffected versionsFixed in
wiremock < 2.16.0 2.16.0

References