high7.5
CVE-2020-13128
An issue was discovered in Manolo GWTUpload 1.0.3.
Impact
An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gwtupload Project | Gwtupload | Version 1.0.3 |