CVE-2020-13128

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java the servlet for handling file upload accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service...

PT-2020-13345

Name of the Vulnerable Software and Affected Versions Manolo GWTUpload version 1.0.3 Description An issue was discovered in the server/UploadServlet.java, which is the servlet for handling file upload. It accepts a delay parameter that causes a thread to sleep. This can be abused to cause all of ...