cbcvebase.

Apache Software Foundation Apache Wicket vulnerabilities

21 known vulnerabilities affecting apache_software_foundation/apache_wicket.

Total CVEs
21
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH4MEDIUM15

Vulnerabilities

Page 2 of 2
CVE-2026-71378P4MEDIUMCVSS 4.6≥ 9.1.0, ≤ 9.23.0≥ 10.0.0, ≤ 10.10.02026-08-31
CVE-2026-71378 [MEDIUM] CWE-352 CVE-2026-71378: ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forge ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from another origin. Its default policy, FetchMetadataResourceIsolationPolicy, was derived from a reference implementation written to guard static resources, and it inherited two
nvd
← Previous2 / 2