{"schema_version": "1.6.1", "id": "CVE-2024-53299", "summary": "An attacker can intentionally trigger a memory leak", "details": "The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources.\nUsers are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "7.0.0"}, {"last_affected": "7.0.0"}]}, {"type": "SEMVER", "events": [{"introduced": "8.0.0-M1"}, {"last_affected": "8.0.0-M1"}]}, {"type": "SEMVER", "events": [{"introduced": "9.0.0-M1"}, {"last_affected": "9.0.0-M1"}]}, {"type": "SEMVER", "events": [{"introduced": "10.0.0-M1"}, {"last_affected": "10.0.0-M1"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/gyp2ht00c62827y0379lxh5dbx3hhho5"}]}