Vendors / Asset Pipeline Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Asset Pipeline Project records in CISA KEV No Asset Pipeline Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Asset Pipeline Grails Plugin Asset-pipeline plugin version Prior to 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerability in Applications deployed in Jetty that can result in Download .class files…
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02511 · Published 2018-12-20 · Fixed in 2.14.1, 2.15.1 +1 CWE-22
Priority LOW 37
An issue was discovered in the Asset Pipeline plugin before 3.0.4 for Grails.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02185 · Published 2018-09-28 · Fixed in 3.0.4 CWE-22
Open these records in search → All records by CVSS severity
0 2 0 0 0
