Skip to content
OpenAdvisories

Package · Maven

org.directwebremoting:dwr

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2007-0185

    Direct Web Remoting vulnerable to Denial of Service

    Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

    org.directwebremoting:dwr Maven
  • High 7.3
    CVE-2007-0184

    Incorrect Authorization in Getahead Direct Web Remoting

    Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks.

    org.directwebremoting:dwr Maven