Priority MEDIUM 53
Grails Spring Security Core plugin is vulnerable to privilege escalation.
grails
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
grails records in CISA KEVNo grails vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2022-16339 CVE-2022-35912 · GHSA-6rh6-x8ww-9h97
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and…
Priority MEDIUM 47
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by g…
TI-2019-09520 CVE-2019-12728 · GHSA-pmxf-4v8c-rwr7
Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service.
Priority LOW 37
Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service.
TI-2014-02947 CVE-2014-3626 · GHSA-983j-49xj-hvgh
Path traversal in Dell EMC Grails by Pivotal
Priority LOW 36
The Grails Resource Plugin often has to exchange URIs for resources with other internal components.
TI-2023-24773 CVE-2023-46131 · GHSA-3pjv-r7w4-2cf5
Grails® data binding causes JVM crash and/or DoS
Priority LOW 34
Grails is a framework used to build web applications with the Groovy programming language.
TI-2018-15928 CVE-2018-1000529 · GHSA-q25j-gcmv-5qpp
Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in…
Priority LOW 30
Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS .
TI-2017-04170 CVE-2017-6344 · GHSA-x232-vpx7-9rvf
XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers…
Priority LOW 29
XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.