Home > Vulnerability Database > CVE-2013-2055

WhiteSource Vulnerability Database

CVE-2013-2055

Good to know:

Date: February 10, 2014

Unspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x before 6.8.0 allows remote attackers to obtain sensitive information via vectors that cause raw HTML templates to be rendered without being processed and reading the information that is outside of wicket:panel markup.

Language: Java

Severity Score

5.0

Related Resources (5)

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-2055

Url: https://wicket.apache.org/2014/02/06/cve-2013-2055.html

Url: http://osvdb.org/102955

Url: https://wicket.apache.org/2013/05/17/wicket-6.8.0-released.html

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2013-2055

Severity Score

5.0

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

Top Fix

Upgrade Version

Upgrade to version 1.4.23,1.5.11,6.8.0

Learn More

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2013-2055

Good to know:

Date: February 10, 2014

Language: Java

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?