Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.directwebremoting:dwr(Maven) | 0 | 1.1.4 | N/A |
CVSS Metrics