CVE-2007-0184: Getahead Direct Web Remoting

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks.

Affected products

• Getahead Direct Web Remoting: up to and including 1.1.3; version 0.7 only; version 0.8 only; version 0.9 only; version 1.0 only; version 1.1.0 only; …

Published 2007-01-12. Last modified 2026-06-16.