CVE-2024-53299

MEDIUM

Apache Wicket < 7.18.0 - Denial of Service

Title source: rule

Description

The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.

References (2)

Scores

CVSS v3 6.5
EPSS 0.0049
EPSS Percentile 65.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-400
Status published

Affected Products (2)

apache/wicket < 7.18.0
org.apache.wicket/wicket-core < 8.17.0Maven

Timeline

Published Jan 23, 2025
Tracked Since Feb 18, 2026