19Mar
CVE-2024-27439 | Apache Wicket up to 9.16.0 Fetch Metadata Header cross-site request forgery
A vulnerability, which was classified as problematic, has been found in Apache Wicket up to 9.16.0. Affected by this issue is some unknown functionality of the component Fetch Metadata Header Handler. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-27439. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.