CVE-2020-11976

By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates

published August 11, 2020

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information inside a HTML template that is usually removed during rendering. Affected are Apache Wicket versions 7.16.0, 8.8.0 and 9.0.0-M5

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03759 · 89.8th percentile
Published
2020-08-11T18:15Z
EPSS history
Timeline
  • 11 AUG 18:15Z
    By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates
    cvelistv5