Not rated
CVE-2024-53299 The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via…
Description
The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Wicket 10.0 | 10.0.0-M1 → latest | No fix stated |
| Apache Wicket 9.0 | 9.0.0-M1 → latest | No fix stated |
| Apache Wicket 8.0 | 8.0.0-M1 → latest | No fix stated |
| Apache Wicket 7.0 | 7.0.0 → latest | No fix stated |
References
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Wicket
The 40 CVEs of Apache Wicket →
CVE-2026-111089
Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes…
7.6
High
CVE-2026-95863
Improper neutralization of input during web page generation in Apache Wicket
7.6
High
CVE-2026-87718
Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers on a page whose render…
2.3
Low
CVE-2026-84231
Improper neutralization of input during web page generation in Apache Wicket
7.4
High