Monthly archive for September 2012

Wicket 1.4.21 released

05 Sep 2012

This is 21st release of the Wicket 1.4.x series. This is also the last release of the 1.4.x series, rounding up the remaining bugfixes. No further releases will happen in this branch.


Apache Wicket v6.0.0 released

05 Sep 2012

“With great pleasure we announce the availability of Apache Wicket 6.0.0”

– Martijn Dashorst, Vice President, Apache Wicket

Apache Wicket v6.0.0 is the 6th major release of the popular open source Java web framework. Numerous enhancem...


CVE-2012-3373 - Apache Wicket XSS vulnerability

06 Sep 2012

Severity: Important

Vendor: The Apache Software Foundation

Versions Affected: Apache Wicket 1.4.x and 1.5.x

Description: It is possible to inject JavaScript statements into an ajax link by adding an encoded null byte to a URL pointing to a Wicket app. This could be done by...