{"action":"Upgrade org.apache.wicket:wicket-core to 1.5.13 (1.x), 6.19.0 (6.x) or 7.0.0-M5 (7.x) or later.","affected":[{"fixed":"1.5.13","introduced":"0"},{"fixed":"6.19.0","introduced":"6.0.0-beta1"},{"fixed":"7.0.0-M5","introduced":"7.0.0-M1"}],"component":"org.apache.wicket:wicket-core","cve_ids":["CVE-2014-7808"],"ecosystem":"Maven","epss":0.01107,"exploited":false,"fixed_versions":["1.5.13","6.19.0","7.0.0-M5"],"ghsa_id":"GHSA-vfmm-jm4v-7frq","id":"tcs_01M5N9DZXHJSGF8AJTB9Z3RS2X","modified_at":"2025-04-22T22:27:12.642337Z","published_at":"2022-05-13T01:27:48Z","references":["https://osv.dev/vulnerability/GHSA-vfmm-jm4v-7frq","https://nvd.nist.gov/vuln/detail/CVE-2014-7808","https://github.com/apache/wicket/commit/d2b8848346b8f806e747dca18799d70c37fc893f","https://github.com/apache/wicket","https://lists.apache.org/thread/rqy6lpo5mzco85cbf65r53vdh87gz77b","https://web.archive.org/web/20180830051017/https://www.smrrd.de/cve-2014-7808-apache-wicket-csrf-2014.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vfmm-jm4v-7frq","url":"https://osv.dev/vulnerability/GHSA-vfmm-jm4v-7frq"}],"summary":"Apache Wicket insecure defaults"}