Vulnerabilities > CVE-2020-15258 - Unspecified vulnerability in Wire

CVSS 8.0 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

wire

NVD

Published: 2020-10-16

Updated: 2024-11-21

Summary

In Wire before 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an attacker to execute code on the victims machine by sending messages containing links with arbitrary protocols. The victim has to interact with the link and sees the URL that is opened. The issue was patched by implementing a helper function which checks if the URL's protocol is common. If it is common, the URL will be opened externally. If not, the URL will not be opened and a warning appears for the user informing them that a probably insecure URL was blocked from being executed. The issue is patched in Wire 3.20.x. More technical details about exploitation are available in the linked advisory.

Vulnerable Configurations

Part	Description	Count
Application	Wire Wire Wire - Wire Wire 1.0.0 Wire Wire 2.2.210 Wire Wire 2.3.211 Wire Wire 2.9.228 Wire Wire 2.9.2644 Wire Wire 2.9.2645 Wire Wire 2.9.2646 Wire Wire 2.9.2647 Wire Wire 2.9.2648 Wire Wire 2.9.2649 Wire Wire 2.10.252 Wire Wire 2.10.2650 Wire Wire 2.10.2651 Wire Wire 2.10.2652 Wire Wire 2.10.2653 Wire Wire 2.10.2654 Wire Wire 2.11.2655 Wire Wire 2.11.2656 Wire Wire 2.11.2657 Wire Wire 2.11.2658 Wire Wire 2.11.2659 Wire Wire 2.11.2660 Wire Wire 2.11.2661 Wire Wire 2.11.2662 Wire Wire 2.11.2663 Wire Wire 2.11.2664 Wire Wire 2.11.2665 Wire Wire 2.11.2666 Wire Wire 2.11.2667 Wire Wire 2.11.2668 Wire Wire 2.11.2669 Wire Wire 2.11.2670 Wire Wire 2.11.2671 Wire Wire 2.11.2672 Wire Wire 2.11.2673 Wire Wire 2.11.2674 Wire Wire 2.11.2675 Wire Wire 2.11.2676 Wire Wire 2.11.2677 Wire Wire 2.11.2678 Wire Wire 2.11.2679 Wire Wire 2.11.2680 Wire Wire 2.11.2681 Wire Wire 2.11.2682 Wire Wire 2.11.2683 Wire Wire 2.11.2684 Wire Wire 2.11.2685 Wire Wire 2.11.2686 Wire Wire 2.11.2687 Wire Wire 2.11.2688 Wire Wire 2.11.2689 Wire Wire 2.11.2690 Wire Wire 2.11.2691 Wire Wire 2.11.2692 Wire Wire 2.11.2693 Wire Wire 2.11.2694 Wire Wire 2.11.2695 Wire Wire 2.11.2696 Wire Wire 2.11.2697 Wire Wire 2.11.2698 Wire Wire 2.11.2699 Wire Wire 2.11.2700 Wire Wire 2.11.2701 Wire Wire 2.11.2702 Wire Wire 2.11.2703 Wire Wire 2.11.2704 Wire Wire 2.11.2705 Wire Wire 2.11.2706 Wire Wire 2.11.2707 Wire Wire 2.11.2708 Wire Wire 2.11.2709 Wire Wire 2.11.2710 Wire Wire 2.11.2711 Wire Wire 2.11.2712 Wire Wire 2.11.2713 Wire Wire 2.11.2714 Wire Wire 2.11.2715 Wire Wire 2.11.2716 Wire Wire 2.11.2717 Wire Wire 2.11.2718 Wire Wire 2.11.2719 Wire Wire 2.11.2720 Wire Wire 2.11.2721 Wire Wire 2.11.2722 Wire Wire 2.11.2723 Wire Wire 2.12.263 Wire Wire 2.12.264 Wire Wire 2.12.2725 Wire Wire 2.12.2726 Wire Wire 2.12.2727 Wire Wire 2.12.2728 Wire Wire 2.12.2729 Wire Wire 2.13.265 Wire Wire 2.13.2724 Wire Wire 2.13.2730 Wire Wire 2.13.2731 Wire Wire 2.13.2732 Wire Wire 2.13.2733 Wire Wire 2.13.2734 Wire Wire 2.13.2735 Wire Wire 2.13.2736 Wire Wire 2.13.2737 Wire Wire 2.13.2738 Wire Wire 2.13.2739 Wire Wire 2.13.2740 Wire Wire 2.13.2741 Wire Wire 2.13.2742 Wire Wire 2.14.275 Wire Wire 2.14.2743 Wire Wire 2.14.2744 Wire Wire 2.15.279 Wire Wire 2.15.2745 Wire Wire 2.15.2746 Wire Wire 2.15.2747 Wire Wire 2.15.2748 Wire Wire 2.15.2749 Wire Wire 2.15.2750 Wire Wire 2.15.2751 Wire Wire 2.16.282 Wire Wire 2.16.2806 Wire Wire 2.17.568 Wire Wire 2.17.2808 Wire Wire 2.17.2813 Wire Wire 2.18.288 Wire Wire 2.19.289 Wire Wire 2.20.293 Wire Wire 2.21.295 Wire Wire 2.22.297 Wire Wire 2.22.298 Wire Wire 2.27.314 Wire Wire 2.29.318 Wire Wire 2.30.321 Wire Wire 2.31.324 Wire Wire 2.31.325 Wire Wire 2.32.326 Wire Wire 2.32.327 Wire Wire 2.32.330 Wire Wire 2.33.333 Wire Wire 2.33.335 Wire Wire 2.34.338 Wire Wire 2.35.339 Wire Wire 2.35.340 Wire Wire 2.36.342 Wire Wire 2.36.343 Wire Wire 2.37.349 Wire Wire 2.38.351 Wire Wire 2.38.352 Wire Wire 2.39.353 Wire Wire 2.39.354 Wire Wire 2.40.357 Wire Wire 2.41.359 Wire Wire 2.42.364 Wire Wire 3.0.2814 Wire Wire 3.0.2816 Wire Wire 3.0.2828 Wire Wire 3.1.2822 Wire Wire 3.2.2840 Wire Wire 3.2.2860 Wire Wire 3.3.2862 Wire Wire 3.3.2868 Wire Wire 3.3.2872 Wire Wire 3.4.2879 Wire Wire 3.4.2883 Wire Wire 3.4.2885 Wire Wire 3.4.2890 Wire Wire 3.5.888 Wire Wire 3.5.2881 Wire Wire 3.5.2899 Wire Wire 3.5.2910 Wire Wire 3.6.2885 Wire Wire 3.6.2908 Wire Wire 3.6.2923 Wire Wire 3.7.2891 Wire Wire 3.7.2917 Wire Wire 3.7.2930 Wire Wire 3.8.2894 Wire Wire 3.8.2927 Wire Wire 3.8.2940 Wire Wire 3.9.2895 Wire Wire 3.9.2928 Wire Wire 3.9.2943 Wire Wire 3.10.2904 Wire Wire 3.10.3133 Wire Wire 3.10.3138 Wire Wire 3.10.3215 Wire Wire 3.11.2912 Wire Wire 3.11.3259 Wire Wire 3.12.2916 Wire Wire 3.12.3423 Wire Wire 3.12.3490 Wire Wire 3.15.2922 Wire Wire 3.15.3551 Wire Wire 3.15.3621 Wire Wire 3.16 Wire Wire 3.16.2923 Wire Wire 3.16.3562 Wire Wire 3.16.3630 Wire Wire 3.17 Wire Wire 3.17.2924 Wire Wire 3.17.3598 Wire Wire 3.17.3666 Wire Wire 3.18 Wire Wire 3.18.2925 Wire Wire 3.18.3660 Wire Wire 3.18.3728 Wire Wire 3.19 Wire Wire 3.19.2928 Wire Wire 3.19.3731 Wire Wire 3.19.3799 Wire Wire 3.20	255

Summary

Vulnerable Configurations

References