CVE-2013-2055

3 documents3 sources
Severity
5.0MEDIUM
EPSS
1.6%
top 18.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Wicket
Timeline
PublishedFeb 10
Latest updateMay 17

Description

Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote attackers to obtain sensitive information via vectors that cause raw HTML templates to be rendered without being processed and reading the information that is outside of wicket:panel markup.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/wicket35 versions+34

🔴Vulnerability Details

2
GHSA
GHSA-j577-p877-4j2j: Unspecified vulnerability in Apache Wicket 1↗2022-05-17
▶
CVEList
CVE-2013-2055: Unspecified vulnerability in Apache Wicket 1↗2014-02-10
▶
CVE-2013-2055 (MEDIUM CVSS 5) | Unspecified vulnerability in Apache | cvebase.io