Description
Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.directwebremoting:dwr | < 1.1.4 | 1.1.4 | GHSA-hg5p-233h-c7fh |
References
- 32658 vdb-entry
- 23641 third-party-advisory
- http://getahead.ltd.uk/dwr/changelog
- ADV-2007-0095 vdb-entry
- SUSE-SR:2009:004 vendor-advisory
- 21955 vdb-entry
- dwr-servlet-engine-dos(31382) vdb-entry