You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@wicket.apache.org by "Martin Grigorov (JIRA)" <ji...@apache.org> on 2014/02/07 15:17:20 UTC

[jira] [Resolved] (WICKET-5502) Patch FileUploadBase to fix CVE-2014-0050

     [ https://issues.apache.org/jira/browse/WICKET-5502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martin Grigorov resolved WICKET-5502.
-------------------------------------

       Resolution: Fixed
    Fix Version/s: 1.5.12
                   7.0.0
                   6.14.0

> Patch FileUploadBase to fix CVE-2014-0050
> -----------------------------------------
>
>                 Key: WICKET-5502
>                 URL: https://issues.apache.org/jira/browse/WICKET-5502
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 1.5.11, 6.13.0
>            Reporter: Martin Grigorov
>            Assignee: Martin Grigorov
>             Fix For: 6.14.0, 7.0.0, 1.5.12
>
>
> Wicket has local copy of commons-fileupload files to avoid having dependency to third party libraries.
> Recently a security vulnerability has been found in commons-fileupload that is fixed in 1.3.1.
> Wicket copy should be patched as well.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)