VULNERABILITY INTELLIGENCE

CVE-2020-13128

CVSS score7.5 HIGH

EPSS probability1.65%

CISA KEVNot currently listed

Published2020-05-18

Last modified2026-06-17

Description

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service.