Description
Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions.
Remediation
References
https://wicket.apache.org/news/2014/09/22/cve-2014-3526.html
Related Vulnerabilities
CVE-2020-21122 Vulnerability in maven package com.bstek.ureport:ureport2-console
CVE-2021-22147 Vulnerability in maven package org.elasticsearch:elasticsearch
CVE-2020-17533 Vulnerability in maven package org.apache.accumulo:accumulo-core
CVE-2019-13990 Vulnerability in maven package org.quartz-scheduler:quartz
CVE-2022-36127 Vulnerability in npm package skywalking-backend-js