CVE-2024-53299
Apache Wicket: An attacker can intentionally trigger a memory leak
Résumé
Apache Wicket: An attacker can intentionally trigger a memory leak
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources.
Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com