CVE-2021-23937

A DNS proxy and possible amplification attack vulnerability in WebClientInfo of Apache Wicket allows an attacker to trigger arbitrary DNS lookups from the server when the X-Forwarded-For header is not properly sanitized. This DNS lookup can be engineered to overload an internal DNS server or to...

com.googlecode.wicket-jquery-ui:jquery-ui-core (1.2.0), com.googlecode.wicket-jquery-ui:jquery-ui-kendo (1.2.0) +18 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.6)

org.apache.wicket:wicket-core MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:jquery-ui-core 1.2.0 - com.googlecode.wicket-jquery-ui:jquery-ui-kend...

de.wicketbuch.extensions:extensible-autolinking (>=1.2.0.wicket6, <=1.3.0.wicket6), de.wicketbuch.extensions:extensible-autolinking-examples (>=1.2.0.wicket6, <=1.3.0.wicket6) +20 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.27.1)

org.apache.wicket:wicket-core MAVEN version 6.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - de.wicketbuch.extensions:extensible-autolinking =1.2.0.wicket6, =1.2.0.wicket6, =1.3.0.wicket6 -...

org.apache.wicket:wicket (1.5-rc2), org.apache.wicket:wicket-auth-roles (1.5-rc2) +119 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5-rc2)

org.apache.wicket:wicket-core MAVEN version 1.5-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - org.apache.wicket:wicket 1.5-rc2 - org.apache.wicket:wicket-auth-roles 1.5-rc2 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.25.0, <=6.25.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.25.0, <=6.25.1) +287 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.25.0)

org.apache.wicket:wicket-core MAVEN version 6.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25....

net.ftlines.metagen:metagen-wicket (>=1.2, <=1.3), net.ftlines.wicket-cdi:wicket-cdi (1.0) +172 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.0)

org.apache.wicket:wicket-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - net.ftlines.metagen:metagen-wicket =1.2, =1.5.006, =1.5.006, =1.5.0.7 - org.apache.wicket:wicket 1.5....

org.apache.wicket:wicket (1.5.17), org.apache.wicket:wicket-auth-roles (1.5.17) +10 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.17)

org.apache.wicket:wicket-core MAVEN version 1.5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - org.apache.wicket:wicket 1.5.17 - org.apache.wicket:wicket-auth-roles 1.5.17 -...

com.googlecode.wicked-charts:wicked-charts-wicket6 (1.3.1), com.googlecode.wicked-forms:wicked-forms-wicket6 (1.0.0.beta) +189 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.3.0)

org.apache.wicket:wicket-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicked-charts:wicked-charts-wicket6 1.3.1 -...

org.apache.wicket:wicket (1.5.12), org.apache.wicket:wicket-auth-roles (1.5.12) +10 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.12)

org.apache.wicket:wicket-core MAVEN version 1.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - org.apache.wicket:wicket 1.5.12 - org.apache.wicket:wicket-auth-roles 1.5.12 -...

com.cooldatasoft:wicket-menu (>=6.17.0.0, <=6.17.0.4), com.cooldatasoft:wicket-menu-demo (>=6.17.0.0, <=6.17.0.4) +283 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.17.0)

org.apache.wicket:wicket-core MAVEN version 6.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.17.0.0, =6.17.0.0, =6.17.0.4 -...

org.apache.wicket:wicket (1.5.1), org.apache.wicket:wicket-auth-roles (1.5.1) +165 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.1)

org.apache.wicket:wicket-core MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - org.apache.wicket:wicket 1.5.1 - org.apache.wicket:wicket-auth-roles 1.5.1 -...

com.googlecode.wicket-jquery-ui:jquery-ui-calendar (6.1.0), com.googlecode.wicket-jquery-ui:jquery-ui-core (6.1.0) +22 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.1.0)

org.apache.wicket:wicket-core MAVEN version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:jquery-ui-calendar 6.1.0 -...

com.googlecode.wicket-charts:wicket-charts (>=1.0.0, <=1.2.0), com.googlecode.wicket-jquery-ui:jquery-ui-core (>=1.0, <=1.1) +201 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.5)

org.apache.wicket:wicket-core MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-charts:wicket-charts =1.0.0, =1.0, =1.1 - org.apache.wicket:wicket 1.5.5 -...

org.apache.wicket:wicket (1.5-rc3), org.apache.wicket:wicket-auth-roles (1.5-rc3) +123 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5-rc3)

org.apache.wicket:wicket-core MAVEN version 1.5-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - org.apache.wicket:wicket 1.5-rc3 - org.apache.wicket:wicket-auth-roles 1.5-rc3 -...

com.jolira:wicket-stateless (1.5.0), nl.topicus:whighcharts (1.5-m3) +198 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5-rc5.1)

org.apache.wicket:wicket-core MAVEN version 1.5-rc5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.jolira:wicket-stateless 1.5.0 - nl.topicus:whighcharts 1.5-m3 - org.apache.wicket:wicket...

com.github.kristofa:wickettagcloud (1.0), com.googlecode.wicked-charts:wicked-charts-wicket6 (1.3.0) +49 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.0.0)

org.apache.wicket:wicket-core MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.github.kristofa:wickettagcloud 1.0 - com.googlecode.wicked-charts:wicked-charts-wicket6 1.3.0 -...

org.apache.wicket:wicket (1.5.16), org.apache.wicket:wicket-auth-roles (1.5.16) +10 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.16)

org.apache.wicket:wicket-core MAVEN version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - org.apache.wicket:wicket 1.5.16 - org.apache.wicket:wicket-auth-roles 1.5.16 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.28.0, <=6.28.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.28.0, <=6.28.1) +241 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.28.0)

org.apache.wicket:wicket-core MAVEN version 6.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28....

com.github.wicket-acc:wicket-autowire (1.0.0), com.googlecode.wicked-charts:wicked-charts-wicket6 (>=2.0.0, <=2.0.1) +279 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.21.0)

org.apache.wicket:wicket-core MAVEN version 6.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.github.wicket-acc:wicket-autowire 1.0.0 - com.googlecode.wicked-charts:wicked-charts-wicket6...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.29.0, <=6.29.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.29.0, <=6.29.1) +67 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.29.0)

org.apache.wicket:wicket-core MAVEN version 6.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29....