Directwebremoting Direct Web Remoting

2 CVEs affecting Directwebremoting Direct Web Remoting. Latest disclosed: 2014-11-24. Critical: 0, High: 0.

Top CVEs affecting Directwebremoting Direct Web Remoting
CVESeverityScorePublishedSummary
CVE-2014-53262014-11-24Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web sc…
CVE-2014-53252014-11-24The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter, and (4) XOMConverter functions in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2…