wireapp wire-server

• CVE-2023-22737 Medium 6.5 wire-server vulnerable to unauthorized removal of Bots from Conversations 0.7%
• CVE-2022-31122 Critical 9.8 Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation 0.7%
• CVE-2021-41119 Medium 5.3 DoS vulnerabiliity in wire-server json parser 1.4%
• CVE-2022-23610 Critical 9.1 Improper Verification of Cryptographic Signature in wire-server 0.7%
• CVE-2021-41100 High 7.4 Account takeover when having only access to a user's short lived token in wire-server 0.9%
• CVE-2021-41101 Medium 5.7 CORS `Access-Control-Allow-Origin` settings are too lenient 0.7%
• CVE-2021-21396 Medium 6.5 Bulk list client endpoint exposes too much metadata about a client 1.2%