The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.
https://lists.apache.org/thread/gyp2ht00c62827y0379lxh5dbx3hhho5
http://www.openwall.com/lists/oss-security/2025/01/22/12
Source: Mitre, NVD
Published: 2025-01-23
Updated: 2025-06-27
Base Score: 6.8
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C
Severity: Medium
Base Score: 6.5
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.00052