CVE-2024-53299

CVE-2024-53299: Apache Wicket: An attacker can intentionally trigger a memory leak

Vendor Apache Software Foundation
Product Apache Wicket
Weakness CWE-400
Published January 23, 2025
Last update February 4, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.

Key dates

02Disclosure timeline

January 23, 2025 CVE published
February 4, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-35909 WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service Attack CVE-2024-0842 Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service CVE-2024-12601 Calculated Fields Form <= 5.2.63 - Denial of Service CVE-2025-50057 Extension - rsjoomla.com - DOS vulnerability RSFiles! component 1.16.3-1.17.7 for Joomla CVE-2026-7493 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service