Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Apache Wicket — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Apache Wicket, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-40010 Apache Wicket: possible session fixation using AuthenticatedWebSession 9.8AICriticalAI2026-05-06
CVE-2026-42509 Apache Wicket: crafted strings can break out of the JavaScript sequence CWE-79 6.1AIMediumAI2026-05-06
CVE-2026-43646 Apache Wicket: crafted URLs can bypass PackageResourceGuard CWE-200 7.5AIHighAI2026-05-06
CVE-2026-43975 Apache Wicket: Possible malicious path traversal in FolderUploadsFileManager CWE-22 9.1AICriticalAI2026-05-06
CVE-2024-53299 Apache Wicket: An attacker can intentionally trigger a memory leak CWE-400 7.5 -2025-01-23
CVE-2024-36522 Apache Wicket: Remote code execution via XSLT injection CWE-74 9.8AICriticalAI2024-07-12
CVE-2024-27439 Apache Wicket: Possible bypass of CSRF protection CWE-352 8.8 -2024-03-19
CVE-2021-23937 DNS proxy and possible amplification attack 7.5 -2021-05-25
CVE-2020-11976 Apache Wicket 信息泄露漏洞 6.5 -2020-08-11
CVE-2014-0043 Apache Wicket 信息泄露漏洞 5.3 -2017-10-02
CVE-2016-6806 Apache Wicket 跨站请求伪造漏洞 8.8 -2017-10-02

All 11 known CVE vulnerabilities affecting Apache Wicket with full Chinese analysis, references, and POCs where available.