Information Disclosure

wicket-core is vulnerable to information disclosure. An attacker is able to see discover confidential information within a HTML template which is usually removed during rendering by submitting a malicious URL to cause Wicket deliver unprocessed HTML templates...