{"action":"Upgrade org.apache.wicket:wicket to 9.17.0 (9.x) or 10.0.0 (10.x) or later.","affected":[{"fixed":"9.17.0","introduced":"9.1.0"},{"fixed":"10.0.0","introduced":"10.0.0-M1"}],"component":"org.apache.wicket:wicket","cve_ids":["CVE-2024-27439"],"ecosystem":"Maven","epss":0.00681,"exploited":false,"fixed_versions":["9.17.0","10.0.0"],"ghsa_id":"GHSA-8vvp-525h-cxf9","id":"tcs_01M5N8NJNXWVMFB8D0HX1VFMM6","modified_at":"2025-02-13T19:13:54.275400Z","published_at":"2024-03-19T12:30:40Z","references":["https://osv.dev/vulnerability/GHSA-8vvp-525h-cxf9","https://nvd.nist.gov/vuln/detail/CVE-2024-27439","https://github.com/apache/wicket","https://lists.apache.org/thread/o825rvjjtmz3qv21ps5k7m2w9193g1lo","http://www.openwall.com/lists/oss-security/2024/03/19/2"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8vvp-525h-cxf9","url":"https://osv.dev/vulnerability/GHSA-8vvp-525h-cxf9"}],"summary":"Cross-Site Request Forgery in Apache Wicket"}