Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass

Apache Wicket published an urgent security bulletin reporting four vulnerabilities — three rated Critical (unauthenticated path traversal allowing arbitrary file read/write, session fixation enabling session hijacking, and a PackageResourceGuard bypass) and one Important (cross-site scripting). The advisory affects 8.x, 9.x and 10.x releases and directs users to upgrade to version 10.9.0 immediately to mitigate potential unauthenticated attacks and information disclosure.