Unauthenticated Arbitrary File Disclosure

org.apache.wicket, wicket-core is vulnerable to an unauthenticated arbitrary file disclosure. The vulnerability is due to improper validation of attacker-controlled locale, style, and variation URL attributes before they are appended to the resource path, which allows an attacker to use path...

Improper Neutralization Of Input During Web Page Generation

org.apache.wicket, wicket-core is vulnerable to improper neutralization of input during web page generation. The vulnerability is due to the resolver rendering attacker-influenced label values without escaping, which allows an attacker to inject malicious markup or script content into a web page...

Directory Traversal

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Request Forgery (CSRF)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Directory Traversal

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

Directory Traversal

Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...

EUVD-2019-16274

Malware in sbrugna...

com.danhaywood.isis.wicket:danhaywood-isis-wicket-excel (>=1.2.0, <=1.3.0), com.danhaywood.isis.wicket:danhaywood-isis-wicket-fullcalendar (1.2.0) +238 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.7.0)

org.apache.wicket:wicket-core MAVEN version 6.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.danhaywood.isis.wicket:danhaywood-isis-wicket-excel =1.2.0, =1.2.0, =1.2.1 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.23.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.23.0) +247 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.23.0)

org.apache.wicket:wicket-core MAVEN version 6.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.23.0 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (3.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (3.0.4) +285 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (>=9.0.0, <=9.2.0)

org.apache.wicket:wicket-core MAVEN version =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.2.1 and more Source cves: CVE-2021-23937 Source advis...

com.cooldatasoft:wicket-menu (1.5.13.1), com.cooldatasoft:wicket-menu-demo (1.5.13.1) +204 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.13)

org.apache.wicket:wicket-core MAVEN version 1.5.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu 1.5.13.1 - com.cooldatasoft:wicket-menu-demo 1.5.13.1 -...

com.github.kristofa:wickettagcloud (1.0), com.googlecode.wicked-charts:wicked-charts-wicket6 (1.3.0) +49 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.0.0)

org.apache.wicket:wicket-core MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.github.kristofa:wickettagcloud 1.0 - com.googlecode.wicked-charts:wicked-charts-wicket6 1.3.0 -...

de.wicketbuch.extensions:extensible-autolinking (1.1.1.wicket5), de.wicketbuch.extensions:extensible-autolinking-examples (1.1.1.wicket5) +13 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.15)

org.apache.wicket:wicket-core MAVEN version 1.5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - de.wicketbuch.extensions:extensible-autolinking 1.1.1.wicket5 -...

ch.qos.mistletoe:mistletoe-test (0.3), ch.qos.mistletoe:mistletoe-wicket (0.3) +229 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.5.0)

org.apache.wicket:wicket-core MAVEN version 6.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - ch.qos.mistletoe:mistletoe-test 0.3 - ch.qos.mistletoe:mistletoe-wicket 0.3 -...