GwtUpload Project GwtUpload 1.0.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gwtupload_project:gwtupload:1.0.3:*:*:*:*:*:*:*

part: a version: 1.0.3 update: *

VendorGwtupload Project (329ee9c6-22c6-5608-934b-cb666c4606ba)
ProductGwtupload (206e633d-af76-5184-9dbd-75bbe9992029)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/manolo/gwtupload purl2cpe 2026-06-01 10:12:18.445637
pkg:maven/com.googlecode.gwtupload/gwtupload-project purl2cpe 2026-06-01 10:12:18.445638

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9447 vulnerable 2026-06-08 05:28:01.749457 Details available
There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which would result in XSS. Cross-site scripting enables attackers to steal data, change the appearance of a website, and perform other malicious activities like phishing or drive-by hacking.
Published: 2020-02-28T15:07:46.000Z
Updated: 2024-08-04T10:26:16.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13128 vulnerable 2026-06-08 05:18:00.203818 Details available
An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service.
Published: 2020-05-17T23:04:55.000Z
Updated: 2024-08-04T12:11:19.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.