CVE-2020-13128

An issue was discovered in Manolo GWTUpload 1.0.3

published May 17, 2020

CVSS
—
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01655 · 76.4th percentile
Published
2020-05-17T23:04Z
EPSS history
Timeline
  • 17 MAY 23:04Z
    An issue was discovered in Manolo GWTUpload 1.0.3
    cvelistv5