https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 17:54:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02450 bdu:2024-02450 https://cve.radiocsirt.org/vuln/bdu:2024-02450 https://cve.radiocsirt.org/vuln/euvd-2026-217349 EUVD-2026-217349 https://cve.radiocsirt.org/vuln/euvd-2026-217349 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27439 <p>An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected.</p> <p>Users are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue.</p> <p>An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected.</p> <p>Users are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27439 https://cve.radiocsirt.org/vuln/ghsa-8vvp-525h-cxf9 <p><strong>Affected:</strong> Maven: org.apache.wicket:wicket</p> <p>An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected.</p> <p>Users are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.wicket:wicket</p> <p>An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch metadata headers and as such is not affected.</p> <p>Users are recommended to upgrade to version 9.17.0 or 10.0.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-8vvp-525h-cxf9 https://cve.radiocsirt.org/vuln/gsd-2024-27439 gsd-2024-27439 https://cve.radiocsirt.org/vuln/gsd-2024-27439 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0656 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Wicket ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Wicket ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0656