com.wire/lithium vulnerabilities

Latest com.wire/lithium CVEs

Newest publication first

1. GHSA-f36p-42jv-8rh2 Lithium vulnerable to Cross Site Scripting in provided Swagger-UI

   Published 2022-09-30

   High·CVSS 8.1

   Impact A XSS vulnerability in the provided (outdated) Swagger-UI is exploitable in applications using lithium with Swagger-UI enabled. This allows an attacker gain Remote Code Execution (RCE) and potentially exfiltrate secrets in the context of this swagger session. Patches The u...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.