From dab81aa3cd29b618a53c496a8a263367f5c92a90 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 23 Apr 2025 02:21:15 +0000
Subject: [PATCH] Publish Advisories

GHSA-244g-8368-6wr9
GHSA-244g-8368-6wr9
---
 .../GHSA-244g-8368-6wr9.json                  | 86 +++++++++++++++++++
 .../GHSA-244g-8368-6wr9.json                  | 40 ---------
 2 files changed, 86 insertions(+), 40 deletions(-)
 create mode 100644 advisories/github-reviewed/2022/05/GHSA-244g-8368-6wr9/GHSA-244g-8368-6wr9.json
 delete mode 100644 advisories/unreviewed/2022/05/GHSA-244g-8368-6wr9/GHSA-244g-8368-6wr9.json

diff --git a/advisories/github-reviewed/2022/05/GHSA-244g-8368-6wr9/GHSA-244g-8368-6wr9.json b/advisories/github-reviewed/2022/05/GHSA-244g-8368-6wr9/GHSA-244g-8368-6wr9.json
new file mode 100644
index 00000000000..c515c4ac090
--- /dev/null
+++ b/advisories/github-reviewed/2022/05/GHSA-244g-8368-6wr9/GHSA-244g-8368-6wr9.json
@@ -0,0 +1,86 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-244g-8368-6wr9",
+  "modified": "2025-04-23T02:20:00Z",
+  "published": "2022-05-17T00:33:50Z",
+  "aliases": [
+    "CVE-2014-0043"
+  ],
+  "summary": "Apache Wicket allows attackers to check for third-party libraries",
+  "details": "In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security vulnerability is in use.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.wicket:wicket-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.5-RC1"
+            },
+            {
+              "fixed": "1.5.11"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 1.5.10"
+      }
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.wicket:wicket-core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "6.0.0-beta1"
+            },
+            {
+              "fixed": "6.14.0"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 6.13.0"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0043"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/apache/wicket"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread.html/d95e962f2f059a09f5abf7086c3f4ed22d2ae2c21499d0de95d4435d@1392986987@%3Cannounce.wicket.apache.org%3E"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-23T02:20:00Z",
+    "nvd_published_at": "2017-10-03T01:29:00Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2022/05/GHSA-244g-8368-6wr9/GHSA-244g-8368-6wr9.json b/advisories/unreviewed/2022/05/GHSA-244g-8368-6wr9/GHSA-244g-8368-6wr9.json
deleted file mode 100644
index fcd6a1a61a3..00000000000
--- a/advisories/unreviewed/2022/05/GHSA-244g-8368-6wr9/GHSA-244g-8368-6wr9.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-244g-8368-6wr9",
-  "modified": "2025-04-20T03:46:07Z",
-  "published": "2022-05-17T00:33:50Z",
-  "aliases": [
-    "CVE-2014-0043"
-  ],
-  "details": "In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security vulnerability is in use.",
-  "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
-    }
-  ],
-  "affected": [],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0043"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.apache.org/thread.html/d95e962f2f059a09f5abf7086c3f4ed22d2ae2c21499d0de95d4435d%401392986987%40%3Cannounce.wicket.apache.org%3E"
-    },
-    {
-      "type": "WEB",
-      "url": "https://lists.apache.org/thread.html/d95e962f2f059a09f5abf7086c3f4ed22d2ae2c21499d0de95d4435d@1392986987@%3Cannounce.wicket.apache.org%3E"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-200"
-    ],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2017-10-03T01:29:00Z"
-  }
-}
\ No newline at end of file