{"action":"Upgrade org.apache.wicket:wicket-core to 1.5.12 (1.x), 6.17.0 (6.x) or 7.0.0-M3 (7.x) or later.","affected":[{"fixed":"1.5.12","introduced":"0"},{"fixed":"6.17.0","introduced":"6.0"},{"fixed":"7.0.0-M3","introduced":"7.0.0-M1"}],"component":"org.apache.wicket:wicket-core","cve_ids":["CVE-2014-3526"],"ecosystem":"Maven","epss":0.02297,"exploited":false,"fixed_versions":["1.5.12","6.17.0","7.0.0-M3"],"ghsa_id":"GHSA-q7wx-mhx4-jr8q","id":"tcs_01M5N9914BCPS8HZ2B3KK8T0W8","modified_at":"2024-02-16T08:15:24.532145Z","published_at":"2022-05-13T01:30:20Z","references":["https://osv.dev/vulnerability/GHSA-q7wx-mhx4-jr8q","https://nvd.nist.gov/vuln/detail/CVE-2014-3526","https://wicket.apache.org/news/2014/09/22/cve-2014-3526.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q7wx-mhx4-jr8q","url":"https://osv.dev/vulnerability/GHSA-q7wx-mhx4-jr8q"}],"summary":"Apache Wicket Sensitive Data Exposure"}