{"action":"Upgrade org.apache.wicket:wicket-core to 6.25.0 (6.x), 7.5.0 (7.x) or 8.0.0-M2 (8.x) or later.","affected":[{"fixed":"6.25.0","introduced":"6.20.0"},{"fixed":"7.5.0","introduced":"7.0.0"},{"fixed":"8.0.0-M2","introduced":"8.0.0-M1"}],"component":"org.apache.wicket:wicket-core","cve_ids":["CVE-2016-6806"],"ecosystem":"Maven","epss":0.00822,"exploited":false,"fixed_versions":["6.25.0","7.5.0","8.0.0-M2"],"ghsa_id":"GHSA-xc66-mg8r-q6r5","id":"tcs_01M5N9J44S9HNDJ7R5J2729V7T","modified_at":"2025-04-23T02:57:32.087891Z","published_at":"2022-05-17T00:31:42Z","references":["https://osv.dev/vulnerability/GHSA-xc66-mg8r-q6r5","https://nvd.nist.gov/vuln/detail/CVE-2016-6806","https://github.com/apache/wicket","https://lists.apache.org/thread.html/074b72585f4b7c6adda1af52aecbfe1be23c6d6f5bb9382270f059cd@%3Cannounce.apache.org%3E"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-xc66-mg8r-q6r5","url":"https://osv.dev/vulnerability/GHSA-xc66-mg8r-q6r5"}],"summary":"Apache Wicket vulnerable to CSRF attacks"}