Skip to content
OpenAdvisories

Package · Maven

org.apache.wicket:wicket

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-27439

    Apache Wicket: Possible bypass of CSRF protection

    An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not supp…

    Apache Software Foundation Apache Wicket org.apache.wicket:wicket Maven