Description

Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service (infinite loop) via unknown vectors related to "crafted input."

Remediation

References

http://getahead.ltd.uk/dwr/changelog

Related Vulnerabilities

CVE-2023-29213 Vulnerability in maven package org.xwiki.platform:xwiki-platform-logging-script

CVE-2019-25155 Vulnerability in maven package org.webjars.bowergithub.cure53:dompurify

CVE-2021-21175 Vulnerability in maven package org.webjars.npm:electron

CVE-2022-25231 Vulnerability in npm package node-opcua

CVE-2020-17479 Vulnerability in npm package jpv

Severity

Critical

Tags

Patch NVD-CWE-Other