Gwtupload Project Gwtupload
2 CVEs affecting Gwtupload Project Gwtupload. Latest disclosed: 2020-05-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-13128 | High | 7.5 | 2020-05-18 | An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thr… |
CVE-2020-9447 | Medium | 6.1 | 2020-02-28 | There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename… |