Direct Web Remoting vulnerable to Denial of Service

MEDIUM 5.0CVE-2007-0185 · GHSA-hg5p-233h-c7fh · Published 12/01/2007 · updated 16/06/2026

In short

CVE-2007-0185 is a MEDIUM (CVSS 5.0) vulnerability affecting org.directwebremoting:dwr, direct web remoting (getahead).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.7% of all vulnerabilities.
Fix: update to 1.1.4 or later.

Package	Affected versions	Patched versions
org.directwebremoting:dwr Maven	`< 1.1.4`	`1.1.4`
direct web remoting getahead	`= 0.7= 0.8= 0.9= 1.0= 1.1.0= 1.1.1= 1.1.2≤ 1.1.3`	No fix yet

Description

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

NVD description

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

References

More vulnerabilities in org.directwebremoting:dwr

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.directwebremoting:dwr

Maven

< 1.1.4

1.1.4

direct web remoting

getahead

= 0.7= 0.8= 0.9= 1.0= 1.1.0= 1.1.1= 1.1.2≤ 1.1.3

No fix yet

Description

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

NVD description

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

More vulnerabilities in org.directwebremoting:dwr

See all →