Vulnerability Details CVE-2023-22737
wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation admins should be able to remove Bots. Regular Conversations are not allowed to do so. The issue is fixed in wire-server 2022-12-09 and is already deployed on all Wire managed services. On-premise instances of wire-server need to be updated to 2022-12-09/Chart 4.29.0, so that their backends are no longer affected. There are no known workarounds.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.6%
CVSS Severity
CVSS v3 Score 6.5
References
- https://github.com/wireapp/wire-server/commit/494a6881f5895d4ed9e5d011455242be0d5e6223
- https://github.com/wireapp/wire-server/pull/2870
- https://github.com/wireapp/wire-server/releases/tag/v2022-12-09
- https://github.com/wireapp/wire-server/security/advisories/GHSA-xmjc-c6w3-pcp4
- https://github.com/wireapp/wire-server/commit/494a6881f5895d4ed9e5d011455242be0d5e6223
- https://github.com/wireapp/wire-server/pull/2870
- https://github.com/wireapp/wire-server/releases/tag/v2022-12-09
- https://github.com/wireapp/wire-server/security/advisories/GHSA-xmjc-c6w3-pcp4
Products affected by CVE-2023-22737
-
cpe:2.3:a:wire:wire:-
-
cpe:2.3:a:wire:wire:1.0.0
-
cpe:2.3:a:wire:wire:2.10.252
-
cpe:2.3:a:wire:wire:2.10.2650
-
cpe:2.3:a:wire:wire:2.10.2651
-
cpe:2.3:a:wire:wire:2.10.2652
-
cpe:2.3:a:wire:wire:2.10.2653
-
cpe:2.3:a:wire:wire:2.10.2654
-
cpe:2.3:a:wire:wire:2.11.2655
-
cpe:2.3:a:wire:wire:2.11.2656
-
cpe:2.3:a:wire:wire:2.11.2657
-
cpe:2.3:a:wire:wire:2.11.2658
-
cpe:2.3:a:wire:wire:2.11.2659
-
cpe:2.3:a:wire:wire:2.11.2660
-
cpe:2.3:a:wire:wire:2.11.2661
-
cpe:2.3:a:wire:wire:2.11.2662
-
cpe:2.3:a:wire:wire:2.11.2663
-
cpe:2.3:a:wire:wire:2.11.2664
-
cpe:2.3:a:wire:wire:2.11.2665
-
cpe:2.3:a:wire:wire:2.11.2666
-
cpe:2.3:a:wire:wire:2.11.2667
-
cpe:2.3:a:wire:wire:2.11.2668
-
cpe:2.3:a:wire:wire:2.11.2669
-
cpe:2.3:a:wire:wire:2.11.2670
-
cpe:2.3:a:wire:wire:2.11.2671
-
cpe:2.3:a:wire:wire:2.11.2672
-
cpe:2.3:a:wire:wire:2.11.2673
-
cpe:2.3:a:wire:wire:2.11.2674
-
cpe:2.3:a:wire:wire:2.11.2675
-
cpe:2.3:a:wire:wire:2.11.2676
-
cpe:2.3:a:wire:wire:2.11.2677
-
cpe:2.3:a:wire:wire:2.11.2678
-
cpe:2.3:a:wire:wire:2.11.2679
-
cpe:2.3:a:wire:wire:2.11.2680
-
cpe:2.3:a:wire:wire:2.11.2681
-
cpe:2.3:a:wire:wire:2.11.2682
-
cpe:2.3:a:wire:wire:2.11.2683
-
cpe:2.3:a:wire:wire:2.11.2684
-
cpe:2.3:a:wire:wire:2.11.2685
-
cpe:2.3:a:wire:wire:2.11.2686
-
cpe:2.3:a:wire:wire:2.11.2687
-
cpe:2.3:a:wire:wire:2.11.2688
-
cpe:2.3:a:wire:wire:2.11.2689
-
cpe:2.3:a:wire:wire:2.11.2690
-
cpe:2.3:a:wire:wire:2.11.2691
-
cpe:2.3:a:wire:wire:2.11.2692
-
cpe:2.3:a:wire:wire:2.11.2693
-
cpe:2.3:a:wire:wire:2.11.2694
-
cpe:2.3:a:wire:wire:2.11.2695
-
cpe:2.3:a:wire:wire:2.11.2696
-
cpe:2.3:a:wire:wire:2.11.2697
-
cpe:2.3:a:wire:wire:2.11.2698
-
cpe:2.3:a:wire:wire:2.11.2699
-
cpe:2.3:a:wire:wire:2.11.2700
-
cpe:2.3:a:wire:wire:2.11.2701
-
cpe:2.3:a:wire:wire:2.11.2702
-
cpe:2.3:a:wire:wire:2.11.2703
-
cpe:2.3:a:wire:wire:2.11.2704
-
cpe:2.3:a:wire:wire:2.11.2705
-
cpe:2.3:a:wire:wire:2.11.2706
-
cpe:2.3:a:wire:wire:2.11.2707
-
cpe:2.3:a:wire:wire:2.11.2708
-
cpe:2.3:a:wire:wire:2.11.2709
-
cpe:2.3:a:wire:wire:2.11.2710
-
cpe:2.3:a:wire:wire:2.11.2711
-
cpe:2.3:a:wire:wire:2.11.2712
-
cpe:2.3:a:wire:wire:2.11.2713
-
cpe:2.3:a:wire:wire:2.11.2714
-
cpe:2.3:a:wire:wire:2.11.2715
-
cpe:2.3:a:wire:wire:2.11.2716
-
cpe:2.3:a:wire:wire:2.11.2717
-
cpe:2.3:a:wire:wire:2.11.2718
-
cpe:2.3:a:wire:wire:2.11.2719
-
cpe:2.3:a:wire:wire:2.11.2720
-
cpe:2.3:a:wire:wire:2.11.2721
-
cpe:2.3:a:wire:wire:2.11.2722
-
cpe:2.3:a:wire:wire:2.11.2723
-
cpe:2.3:a:wire:wire:2.12.263
-
cpe:2.3:a:wire:wire:2.12.264
-
cpe:2.3:a:wire:wire:2.12.2725
-
cpe:2.3:a:wire:wire:2.12.2726
-
cpe:2.3:a:wire:wire:2.12.2727
-
cpe:2.3:a:wire:wire:2.12.2728
-
cpe:2.3:a:wire:wire:2.12.2729
-
cpe:2.3:a:wire:wire:2.13.265
-
cpe:2.3:a:wire:wire:2.13.2724
-
cpe:2.3:a:wire:wire:2.13.2730
-
cpe:2.3:a:wire:wire:2.13.2731
-
cpe:2.3:a:wire:wire:2.13.2732
-
cpe:2.3:a:wire:wire:2.13.2733
-
cpe:2.3:a:wire:wire:2.13.2734
-
cpe:2.3:a:wire:wire:2.13.2735
-
cpe:2.3:a:wire:wire:2.13.2736
-
cpe:2.3:a:wire:wire:2.13.2737
-
cpe:2.3:a:wire:wire:2.13.2738
-
cpe:2.3:a:wire:wire:2.13.2739
-
cpe:2.3:a:wire:wire:2.13.2740
-
cpe:2.3:a:wire:wire:2.13.2741
-
cpe:2.3:a:wire:wire:2.13.2742
-
cpe:2.3:a:wire:wire:2.14.2743
-
cpe:2.3:a:wire:wire:2.14.2744
-
cpe:2.3:a:wire:wire:2.14.275
-
cpe:2.3:a:wire:wire:2.15.2745
-
cpe:2.3:a:wire:wire:2.15.2746
-
cpe:2.3:a:wire:wire:2.15.2747
-
cpe:2.3:a:wire:wire:2.15.2748
-
cpe:2.3:a:wire:wire:2.15.2749
-
cpe:2.3:a:wire:wire:2.15.2750
-
cpe:2.3:a:wire:wire:2.15.2751
-
cpe:2.3:a:wire:wire:2.15.279
-
cpe:2.3:a:wire:wire:2.16.2806
-
cpe:2.3:a:wire:wire:2.16.282
-
cpe:2.3:a:wire:wire:2.17.2808
-
cpe:2.3:a:wire:wire:2.17.2813
-
cpe:2.3:a:wire:wire:2.17.568
-
cpe:2.3:a:wire:wire:2.18.288
-
cpe:2.3:a:wire:wire:2.19.289
-
cpe:2.3:a:wire:wire:2.2.210
-
cpe:2.3:a:wire:wire:2.20.293
-
cpe:2.3:a:wire:wire:2.21.295
-
cpe:2.3:a:wire:wire:2.22.297
-
cpe:2.3:a:wire:wire:2.22.298
-
cpe:2.3:a:wire:wire:2.27.314
-
cpe:2.3:a:wire:wire:2.29.318
-
cpe:2.3:a:wire:wire:2.3.211
-
cpe:2.3:a:wire:wire:2.30.321
-
cpe:2.3:a:wire:wire:2.31.324
-
cpe:2.3:a:wire:wire:2.31.325
-
cpe:2.3:a:wire:wire:2.32.326
-
cpe:2.3:a:wire:wire:2.32.327
-
cpe:2.3:a:wire:wire:2.32.330
-
cpe:2.3:a:wire:wire:2.33.333
-
cpe:2.3:a:wire:wire:2.33.335
-
cpe:2.3:a:wire:wire:2.34.338
-
cpe:2.3:a:wire:wire:2.35.339
-
cpe:2.3:a:wire:wire:2.35.340
-
cpe:2.3:a:wire:wire:2.36.342
-
cpe:2.3:a:wire:wire:2.36.343
-
cpe:2.3:a:wire:wire:2.37.349
-
cpe:2.3:a:wire:wire:2.38.351
-
cpe:2.3:a:wire:wire:2.38.352
-
cpe:2.3:a:wire:wire:2.39.353
-
cpe:2.3:a:wire:wire:2.39.354
-
cpe:2.3:a:wire:wire:2.40.357
-
cpe:2.3:a:wire:wire:2.41.359
-
cpe:2.3:a:wire:wire:2.42.364
-
cpe:2.3:a:wire:wire:2.9.228
-
cpe:2.3:a:wire:wire:2.9.2644
-
cpe:2.3:a:wire:wire:2.9.2645
-
cpe:2.3:a:wire:wire:2.9.2646
-
cpe:2.3:a:wire:wire:2.9.2647
-
cpe:2.3:a:wire:wire:2.9.2648
-
cpe:2.3:a:wire:wire:2.9.2649
-
cpe:2.3:a:wire:wire:2018-03-07
-
cpe:2.3:a:wire:wire:2020-10-16
-
cpe:2.3:a:wire:wire:3.0.2814
-
cpe:2.3:a:wire:wire:3.0.2816
-
cpe:2.3:a:wire:wire:3.0.2828
-
cpe:2.3:a:wire:wire:3.1.2822
-
cpe:2.3:a:wire:wire:3.10.2904
-
cpe:2.3:a:wire:wire:3.10.3133
-
cpe:2.3:a:wire:wire:3.10.3138
-
cpe:2.3:a:wire:wire:3.10.3215
-
cpe:2.3:a:wire:wire:3.100
-
cpe:2.3:a:wire:wire:3.101
-
cpe:2.3:a:wire:wire:3.102
-
cpe:2.3:a:wire:wire:3.103
-
cpe:2.3:a:wire:wire:3.11.2912
-
cpe:2.3:a:wire:wire:3.11.3259
-
cpe:2.3:a:wire:wire:3.12.2916
-
cpe:2.3:a:wire:wire:3.12.3423
-
cpe:2.3:a:wire:wire:3.12.3490
-
cpe:2.3:a:wire:wire:3.15.2922
-
cpe:2.3:a:wire:wire:3.15.3551
-
cpe:2.3:a:wire:wire:3.15.3621
-
cpe:2.3:a:wire:wire:3.16
-
cpe:2.3:a:wire:wire:3.16.2923
-
cpe:2.3:a:wire:wire:3.16.3562
-
cpe:2.3:a:wire:wire:3.16.3630
-
cpe:2.3:a:wire:wire:3.17
-
cpe:2.3:a:wire:wire:3.17.2924
-
cpe:2.3:a:wire:wire:3.17.3598
-
cpe:2.3:a:wire:wire:3.17.3666
-
cpe:2.3:a:wire:wire:3.18
-
cpe:2.3:a:wire:wire:3.18.2925
-
cpe:2.3:a:wire:wire:3.18.3660
-
cpe:2.3:a:wire:wire:3.18.3728
-
cpe:2.3:a:wire:wire:3.19
-
cpe:2.3:a:wire:wire:3.19.2928
-
cpe:2.3:a:wire:wire:3.19.3731
-
cpe:2.3:a:wire:wire:3.19.3799
-
cpe:2.3:a:wire:wire:3.2.2840
-
cpe:2.3:a:wire:wire:3.2.2860
-
cpe:2.3:a:wire:wire:3.20
-
cpe:2.3:a:wire:wire:3.20.2934
-
cpe:2.3:a:wire:wire:3.20.3890
-
cpe:2.3:a:wire:wire:3.20.3912
-
cpe:2.3:a:wire:wire:3.21
-
cpe:2.3:a:wire:wire:3.21.2936
-
cpe:2.3:a:wire:wire:3.21.3932
-
cpe:2.3:a:wire:wire:3.21.3959
-
cpe:2.3:a:wire:wire:3.22
-
cpe:2.3:a:wire:wire:3.22.3993
-
cpe:2.3:a:wire:wire:3.23
-
cpe:2.3:a:wire:wire:3.23.4018
-
cpe:2.3:a:wire:wire:3.24
-
cpe:2.3:a:wire:wire:3.24.4036
-
cpe:2.3:a:wire:wire:3.24.684
-
cpe:2.3:a:wire:wire:3.25
-
cpe:2.3:a:wire:wire:3.25.4071
-
cpe:2.3:a:wire:wire:3.25.685
-
cpe:2.3:a:wire:wire:3.26
-
cpe:2.3:a:wire:wire:3.26.4124
-
cpe:2.3:a:wire:wire:3.27
-
cpe:2.3:a:wire:wire:3.27.4223
-
cpe:2.3:a:wire:wire:3.27.697
-
cpe:2.3:a:wire:wire:3.28
-
cpe:2.3:a:wire:wire:3.28.1
-
cpe:2.3:a:wire:wire:3.28.4253
-
cpe:2.3:a:wire:wire:3.29
-
cpe:2.3:a:wire:wire:3.29.4330
-
cpe:2.3:a:wire:wire:3.29.4349
-
cpe:2.3:a:wire:wire:3.3.2862
-
cpe:2.3:a:wire:wire:3.3.2868
-
cpe:2.3:a:wire:wire:3.3.2872
-
cpe:2.3:a:wire:wire:3.30
-
cpe:2.3:a:wire:wire:3.31
-
cpe:2.3:a:wire:wire:3.32
-
cpe:2.3:a:wire:wire:3.33
-
cpe:2.3:a:wire:wire:3.33.1
-
cpe:2.3:a:wire:wire:3.34
-
cpe:2.3:a:wire:wire:3.35
-
cpe:2.3:a:wire:wire:3.35.814
-
cpe:2.3:a:wire:wire:3.36
-
cpe:2.3:a:wire:wire:3.36.819
-
cpe:2.3:a:wire:wire:3.37
-
cpe:2.3:a:wire:wire:3.37.3113
-
cpe:2.3:a:wire:wire:3.37.820
-
cpe:2.3:a:wire:wire:3.38
-
cpe:2.3:a:wire:wire:3.39
-
cpe:2.3:a:wire:wire:3.4.2879
-
cpe:2.3:a:wire:wire:3.4.2883
-
cpe:2.3:a:wire:wire:3.4.2885
-
cpe:2.3:a:wire:wire:3.4.2890
-
cpe:2.3:a:wire:wire:3.40
-
cpe:2.3:a:wire:wire:3.41
-
cpe:2.3:a:wire:wire:3.42
-
cpe:2.3:a:wire:wire:3.42.863
-
cpe:2.3:a:wire:wire:3.43
-
cpe:2.3:a:wire:wire:3.44
-
cpe:2.3:a:wire:wire:3.45
-
cpe:2.3:a:wire:wire:3.46
-
cpe:2.3:a:wire:wire:3.47
-
cpe:2.3:a:wire:wire:3.47.911
-
cpe:2.3:a:wire:wire:3.48
-
cpe:2.3:a:wire:wire:3.48.915
-
cpe:2.3:a:wire:wire:3.49
-
cpe:2.3:a:wire:wire:3.49.918
-
cpe:2.3:a:wire:wire:3.49.921
-
cpe:2.3:a:wire:wire:3.5.2881
-
cpe:2.3:a:wire:wire:3.5.2899
-
cpe:2.3:a:wire:wire:3.5.2910
-
cpe:2.3:a:wire:wire:3.5.888
-
cpe:2.3:a:wire:wire:3.50
-
cpe:2.3:a:wire:wire:3.51
-
cpe:2.3:a:wire:wire:3.52
-
cpe:2.3:a:wire:wire:3.53
-
cpe:2.3:a:wire:wire:3.54
-
cpe:2.3:a:wire:wire:3.55
-
cpe:2.3:a:wire:wire:3.56
-
cpe:2.3:a:wire:wire:3.57
-
cpe:2.3:a:wire:wire:3.57.948
-
cpe:2.3:a:wire:wire:3.58
-
cpe:2.3:a:wire:wire:3.59
-
cpe:2.3:a:wire:wire:3.59.959
-
cpe:2.3:a:wire:wire:3.6.2885
-
cpe:2.3:a:wire:wire:3.6.2908
-
cpe:2.3:a:wire:wire:3.6.2923
-
cpe:2.3:a:wire:wire:3.60
-
cpe:2.3:a:wire:wire:3.61
-
cpe:2.3:a:wire:wire:3.61.964
-
cpe:2.3:a:wire:wire:3.61.965
-
cpe:2.3:a:wire:wire:3.62
-
cpe:2.3:a:wire:wire:3.63
-
cpe:2.3:a:wire:wire:3.63.974
-
cpe:2.3:a:wire:wire:3.64
-
cpe:2.3:a:wire:wire:3.65
-
cpe:2.3:a:wire:wire:3.66
-
cpe:2.3:a:wire:wire:3.66.985
-
cpe:2.3:a:wire:wire:3.67
-
cpe:2.3:a:wire:wire:3.68
-
cpe:2.3:a:wire:wire:3.69
-
cpe:2.3:a:wire:wire:3.7.2891
-
cpe:2.3:a:wire:wire:3.7.2917
-
cpe:2.3:a:wire:wire:3.7.2930
-
cpe:2.3:a:wire:wire:3.70
-
cpe:2.3:a:wire:wire:3.71
-
cpe:2.3:a:wire:wire:3.72
-
cpe:2.3:a:wire:wire:3.73
-
cpe:2.3:a:wire:wire:3.74
-
cpe:2.3:a:wire:wire:3.75
-
cpe:2.3:a:wire:wire:3.76
-
cpe:2.3:a:wire:wire:3.77
-
cpe:2.3:a:wire:wire:3.8.2894
-
cpe:2.3:a:wire:wire:3.8.2927
-
cpe:2.3:a:wire:wire:3.8.2940
-
cpe:2.3:a:wire:wire:3.80
-
cpe:2.3:a:wire:wire:3.81
-
cpe:2.3:a:wire:wire:3.82
-
cpe:2.3:a:wire:wire:3.83
-
cpe:2.3:a:wire:wire:3.84
-
cpe:2.3:a:wire:wire:3.85
-
cpe:2.3:a:wire:wire:3.86
-
cpe:2.3:a:wire:wire:3.87
-
cpe:2.3:a:wire:wire:3.88
-
cpe:2.3:a:wire:wire:3.89
-
cpe:2.3:a:wire:wire:3.9.2895
-
cpe:2.3:a:wire:wire:3.9.2928
-
cpe:2.3:a:wire:wire:3.9.2943
-
cpe:2.3:a:wire:wire:3.90
-
cpe:2.3:a:wire:wire:3.94
-
cpe:2.3:a:wire:wire:3.95
-
cpe:2.3:a:wire:wire:3.96
-
cpe:2.3:a:wire:wire:3.97
-
cpe:2.3:a:wire:wire:3.98
-
cpe:2.3:a:wire:wire:3.99