PT-2025-34902 · Wicket · Wicket

4Rdr · Published 2025-08-27 · Updated 2025-08-27 · CVE-2025-50977

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: versions prior to 1.7.1

Description: A template injection vulnerability leading to reflected cross-site scripting (XSS) has been identified, requiring authenticated admin access for exploitation. The vulnerability exists in the r parameter and allows attackers to inject malicious Angular expressions that execute JavaScript code in the context of the application. The flaw can be exploited through GET requests to the /summary endpoint as well as POST requests to specific Wicket interface endpoints.

Recommendations: Update to a version prior to 1.7.1. Restrict access to the r parameter in the /summary endpoint. Limit authenticated admin access to reduce the potential impact of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-50977

Affected Products

Wicket

References · 5

• 🔥 https://github.com/4rdr/proofs/blob/main/info/gitblit-v1.7.1-reflected-XSS-via-angularjs-expression.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-50977 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50977 · Security Note
• https://twitter.com/VulmonFeeds/status/1960844812615025012 · Twitter Post
• https://twitter.com/CVEnew/status/1960751086954049950 · Twitter Post