CVE-2024-53299

Apache Wicket: An attacker can intentionally trigger a memory leak

CVSS 6.5 MEDIUMEPSS 1.5%CWE-400

The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

Apache Software Foundation · Apache Wicket

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://lists.apache.org/thread/gyp2ht00c62827y0379lxh5dbx3hhho5 http://www.openwall.com/lists/oss-security/2025/01/22/12