CVE-2024-53299
Apache Wicket: An attacker can intentionally trigger a memory leak
Summary
Apache Wicket: An attacker can intentionally trigger a memory leak
Original description
The description as published by the source.
The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources.
Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com