CVE-2020-13128

7.5 highEPSS 1.7%

High (7.5) in gwtupload project gwtupload. EPSS 1.7% chance of exploitation in the next 30 days.

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2020-05-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gwtupload_project:gwtupload

References

https://github.com/manolo/gwtupload/issues/33
https://logicaltrust.net/blog/2020/02/gwt-upload.html
https://github.com/manolo/gwtupload/issues/33
https://logicaltrust.net/blog/2020/02/gwt-upload.html

Check your stack JSON