grails

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

grails records in CISA KEV

No grails vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Pdf Plugin · all components

TI-2017-04170 CVE-2017-6344 · GHSA-x232-vpx7-9rvf

LOW 29

XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.

CVSS 3.0MEDIUM 5.9 Local Low privileges User interaction EPSS 0.01233 Published 2017-02-27 No fix listed CWE-611