CVE-2021-32683

Name of the Vulnerable Software and Affected Versions wire-webapp versions prior to 2021-06-01-production.0

Description A cross-site scripting issue exists in the web version of Wire, an open-source messenger. If a user opens an image in a new tab, the image payload is executed on the domain hosting the app. This allows malicious code within the image to be executed, potentially giving an attacker full control over the user account.

Recommendations For versions prior to 2021-06-01-production.0, update to version 2021-06-01-production.0 to resolve the issue. As a temporary workaround, users should not try to open image URLs.