Skip to content

Product

org.apache.wicket/wicket vulnerabilities

1 published CVE affecting org.apache.wicket/wicket, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.wicket/wicket CVEs

Newest publication first

  1. CVE-2024-27439 Apache Wicket: Possible bypass of CSRF protection

    Published
    MediumCVSS 6.5 EPSS 0.68%

    An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection v...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.