Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.directwebremoting:dwr

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Maven Central

Advisories 4

  • Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to…

    Affected: fixed in 2.0.11; from 3.0.M1, fixed in 3.0.RC3.

  • The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter, and (4) XOMConverter functions in Direct Web Remoting (DWR) through 2.0.10…

    Affected: fixed in 2.0.11; from 3.0.M1, fixed in 3.0.RC3.

  • Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via…

    Affected: fixed in 1.1.4.

  • Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request…

    Affected: fixed in 1.1.4.