Description
Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service (infinite loop) via unknown vectors related to "crafted input."
Remediation
References
http://getahead.ltd.uk/dwr/changelog
Related Vulnerabilities
CVE-2018-19839 Vulnerability in maven package org.webjars.npm:node-sass
CVE-2020-28268 Vulnerability in npm package controlled-merge
CVE-2019-8331 Vulnerability in maven package org.webjars:bootstrap
CVE-2018-1000632 Vulnerability in maven package org.dom4j:dom4j
CVE-2023-2798 Vulnerability in maven package net.sourceforge.htmlunit:htmlunit