cbcvebase.
CVE-2013-2055
published 2014-02-10

CVE-2013-2055: Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote attackers to obtain sensitive…

PriorityP424medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
3.19%
86.6th percentile
Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote attackers to obtain sensitive information via vectors that cause raw HTML templates to be rendered without being processed and reading the information that is outside of wicket:panel markup.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
apachewicket——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.