December
- CVE-2016-6793 Apache Wicket deserialization vulnerability Security Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 6.x and 1.5.x Description: Depending on the ISerializer set in the Wicket application, it’s possible that a...
- Apache Wicket 8.0.0-M3 released
- Apache Wicket 7.6.0 released
- Apache Wicket 6.26.0 released
November
- CVE-2016-6806 Apache Wicket CSRF detection vulnerability Security Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 6.20.0, 6.21.0, 6.22.0, 6.23.0, 6.24.0, 7.0.0, 7.1.0, 7.2.0, 7.3.0, 7.4.0 and 8.0.0-M1 Description: Affected versions of Apache...
October
August
- Wicket 1.5.16 released
- CVE-2016-3092 & CVE-2013-2186 Apache Commons Fileupload vulnerabilities Security Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: CVE-2016-3092: A malicious client can send file upload requests that cause the...
July
May
March
- CVE-2015-7520 Apache Wicket XSS vulnerability Security Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: It is possible for JavaScript statements to break out of a RadioGroup’s...
- CVE-2015-5347 Apache Wicket XSS vulnerability Security Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: It is possible for JavaScript statements to break out of a ModalWindow’s...