what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Pedro Santos

Apache Wicket 6.x / 1.5.x Deserialization

Posted Jan 1, 2016

Authored by Pedro Santos

Depending on the ISerializer set in the Wicket application, it's possible that a Wicket's object deserialized from an untrusted source and utilized by the application to causes the code to enter in an infinite loop. Specifically, Wicket's DiskFileItem class, serialized by Kryo, allows an attacker to hack its serialized form to put a client on an infinite loop if the client attempts to write on the DeferredFileOutputStream attribute. Versions 6.x prior to 6.25.0 and 1.5.x prior to 1.5.17 are affected.

tags | advisory

advisories | CVE-2016-6793

SHA-256 | eaa2e71f2907fbd43ee0128d07f137d756dd3e8c6e960de22f4853b9d6e6ff89

Download | Favorite | View