Denial Of Service (DoS)

2020-05-2001:46:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

44.7%

JSON

gwtupload is vulnerable to denial of service. The upload servlet accepts a delay parameter which would cause the server’s threads to sleep, eventually causing the application to be non-responsive.

CPENameOperatorVersion
gwtupload libraryeq1.0.3
gwtupload libraryeq1.0.3

CPE	Name	Operator	Version
	gwtupload library	eq	1.0.3
	gwtupload library	eq	1.0.3

References

github.com/manolo/gwtupload/issues/33

logicaltrust.net/blog/2020/02/gwt-upload.html

0.001 Low

EPSS

Percentile

44.7%

JSON

Related for VERACODE:25455