Threats Tagged 'ghsa-gfx8-6vm5-ghqh'
View all threats tagged with 'ghsa-gfx8-6vm5-ghqh'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-gfx8-6vm5-ghqh'
Click on any threat for detailed analysis and mitigation recommendations
Apache Wicket versions 8.18.0 and earlier, 9.23.0 and earlier, and 10.10.0 and earlier contain an improper validation vulnerability in resource URL attributes. This flaw allows unauthenticated remote attackers to read files from the web application, including files under WEB-INF that are normally protected by the servlet container. The vulnerability arises because locale, style, and variation attributes are appended to resource paths without proper path separator checks, bypassing intended directory traversal protections. The set of files accessible depends on the configured IPackageResourceGuard, with default settings limiting file types but custom configurations potentially exposing sensitive configuration files. The issue is fixed in Apache Wicket versions 8.19.0, 9.24.0, and 10.11.0. Join the discussion | GCVE Database | 08/31/2026, 12:30:24 UTC Added: 08/31/2026, 15:42:25 UTC |
Showing 1 to 1 of 1 result