grails

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

grails records in CISA KEV

No grails vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Spring Security Core · all components

TI-2022-20264 CVE-2022-41923

MEDIUM 53

Grails Spring Security Core plugin is vulnerable to privilege escalation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01931 Published 2022-11-23 Fixed in 5.1.1, 4.0.5 +1 CWE-269