2 matches found
GHSA-Q7WX-MHX4-JR8Q Apache Wicket Sensitive Data Exposure
Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions...
7.5CVSS5.9AI score0.02297EPSS
SaveExploits0References2
CVE-2014-3526: Exposure of Sensitive Information to an Unauthorized Actor
Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions...
7.5CVSS7.3AI score0.02297EPSS
SaveExploits0References2
20