Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-11976

By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information inside a HTML templat

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information inside a HTML template that is usually removed during rendering. Affected are Apache Wicket versions 7.16.0, 8.8.0 and 9.0.0-M5

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Apache Wicket

  • Apache Wicket 7.16.0, 8.8.0, 9.0.0-M5affected

References