Description

Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service (infinite loop) via unknown vectors related to "crafted input."

Remediation

References

http://getahead.ltd.uk/dwr/changelog

Related Vulnerabilities

CVE-2021-21120 Vulnerability in npm package electron

CVE-2022-25210 Vulnerability in maven package com.convertigo.jenkins.plugins:convertigo-mobile-platform

CVE-2021-21266 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.binding.vitotronic

CVE-2014-0035 Vulnerability in maven package org.apache.cxf:cxf-bundle

CVE-2015-8859 Vulnerability in maven package org.webjars.npm:send

Severity

Critical

Tags

Patch NVD-CWE-Other