CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects Apache, Java. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2016-6793
Severity
CRITICAL
CVSS
9.1
EPSS
8.46%
Apache Java
Original NVD Description
The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the permissions of DiskFileItem, and if running on a Java VM before 1.3.1, execute arbitrary code via a crafted serialized Java object.
Related CVEs
Other vulnerabilities affecting the same vendor(s)