GitHub Advisoryadvisory · Maven

GHSA-hg5p-233h-c7fh Direct Web Remoting vulnerable to Denial of Service

HIGH Published 2022-05-01 Modified 2022-07-05 Official page ↗
Aliases
CVE-2007-0185
Ecosystem
Maven
Packages
org.directwebremoting:dwr
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reviewed
2022-07-05

Affected packages

• Maven org.directwebremoting:dwr: < 1.1.4 → fixed in 1.1.4

Description

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

Related

Alias · CVE (1)

  • CVE-2007-0185 Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via… vulnerability

References