description: By crafting a special URL it is possible to make Wicket deliver unprocessed HTML templates. This would allow an attacker to see possibly sensitive information inside a HTML template that is usually removed during rendering. Affected are Apache Wicket versions 7.16.0, 8.8.0 and 9.0.0-M5
problem types: Information Disclosure
affected:
{
product: Apache Wicket
vendor: n/a
versions:
status: affected, version: Apache Wicket 7.16.0, 8.8.0, 9.0.0-M5
}