Apache Wicket Sensitive Data Exposure

GHSA-q7wx-mhx4-jr8q · CVE-2014-3526

Published May 13, 2022 · Modified Feb 16, 2024

Description

Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2014-3526
WEB https://wicket.apache.org/news/2014/09/22/cve-2014-3526.html

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes