Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-53299

Apache Wicket: An attacker can intentionally trigger a memory leak

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Wicket

Default version status: unaffected

  • 7.0.0 to ≤ 7.18.*affected
  • 8.0.0-M1 to ≤ 8.16.*affected
  • 9.0.0-M1 to ≤ 9.18.*affected
  • 10.0.0-M1 to ≤ 10.2.*affected

References