CVE-2024-27439

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 19/03/2024 Updated: 01/05/2024

An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 up to and including 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected. Users are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue.

Severity: moderate Affected versions: - Apache Wicket 910 through 9160 - Apache Wicket 1000-M1 before 1000 Description: An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket This issue affects Apache Wicket: from 910 through 9160, and the milestone releases for the 10 ...

CWE-352 CWE-444 https://lists.apache.org/thread/o825rvjjtmz3qv21ps5k7m2w9193g1lo http://www.openwall.com/lists/oss-security/2024/03/19/2 https://nvd.nist.gov https://seclists.org/oss-sec/2024/q1/235

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-27439

Vulnerability Summary

Mailing Lists

References

Vulmon Search

About

Products

Connect