CVE Vulnerabilities

CVE-2013-2055

Published: Feb 10, 2014 | Modified: Feb 11, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote attackers to obtain sensitive information via vectors that cause raw HTML templates to be rendered without being processed and reading the information that is outside of wicket:panel markup.

Affected Software

Name Vendor Start Version End Version
Wicket Apache 1.4.0 (including) 1.4.0 (including)
Wicket Apache 1.4.1 (including) 1.4.1 (including)
Wicket Apache 1.4.10 (including) 1.4.10 (including)
Wicket Apache 1.4.11 (including) 1.4.11 (including)
Wicket Apache 1.4.12 (including) 1.4.12 (including)
Wicket Apache 1.4.13 (including) 1.4.13 (including)
Wicket Apache 1.4.14 (including) 1.4.14 (including)
Wicket Apache 1.4.15 (including) 1.4.15 (including)
Wicket Apache 1.4.16 (including) 1.4.16 (including)
Wicket Apache 1.4.17 (including) 1.4.17 (including)
Wicket Apache 1.4.18 (including) 1.4.18 (including)
Wicket Apache 1.4.19 (including) 1.4.19 (including)
Wicket Apache 1.4.20 (including) 1.4.20 (including)
Wicket Apache 1.4.21 (including) 1.4.21 (including)
Wicket Apache 1.4.22 (including) 1.4.22 (including)
Wicket Apache 1.5.0 (including) 1.5.0 (including)
Wicket Apache 1.5.1 (including) 1.5.1 (including)
Wicket Apache 1.5.2 (including) 1.5.2 (including)
Wicket Apache 1.5.3 (including) 1.5.3 (including)
Wicket Apache 1.5.4 (including) 1.5.4 (including)
Wicket Apache 1.5.5 (including) 1.5.5 (including)
Wicket Apache 1.5.6 (including) 1.5.6 (including)
Wicket Apache 1.5.7 (including) 1.5.7 (including)
Wicket Apache 1.5.8 (including) 1.5.8 (including)
Wicket Apache 1.5.9 (including) 1.5.9 (including)
Wicket Apache 1.5.10 (including) 1.5.10 (including)
Wicket Apache 6.1.0 (including) 6.1.0 (including)
Wicket Apache 6.1.1 (including) 6.1.1 (including)
Wicket Apache 6.2.0 (including) 6.2.0 (including)
Wicket Apache 6.3.0 (including) 6.3.0 (including)
Wicket Apache 6.4.0 (including) 6.4.0 (including)
Wicket Apache 6.5.0 (including) 6.5.0 (including)
Wicket Apache 6.6.0 (including) 6.6.0 (including)
Wicket Apache 6.7.0 (including) 6.7.0 (including)
Wicket Apache 6.8.0 (including) 6.8.0 (including)

References