CVE-2024-53299
Apache Wicket: An attacker can intentionally trigger a memory leak
概要
Apache Wicket: An attacker can intentionally trigger a memory leak
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources.
Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com