CVE-2016-6793 The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the per...
CriticalCVSS 9.1
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the permissions of DiskFileItem, and if running on a Java VM before 1.3.1, execute arbitrary code via a crafted serialized Java object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache wicket | >= 1.5.0, < 1.5.17 | 1.5.17 |
| apache wicket | >= 6.0.0, < 6.25.0 | 6.25.0 |
References
- [oss-security] 20161231 Fwd: [ANNOUNCE] CVE-2016-6793 Apache Wicket deserialization vulnerability mailing-list third-party-advisory
- 20161231 Fwd: [ANNOUNCE] CVE-2016-6793 Apache Wicket deserialization vulnerability mailing-list third-party-advisory vdb-entry
- 95168 third-party-advisory vdb-entry
- 1037541 third-party-advisory vdb-entry
- wicket.apache.org vendor-advisory
- www.tenable.com third-party-advisory