TI-2023-24773 CVE-2023-46131 · GHSA-3pjv-r7w4-2cf5
Grails® data binding causes JVM crash and/or DoS
Priority LOW 34
Grails is a framework used to build web applications with the Groovy programming language.
Vulnerabilities
7 records
Priority MEDIUM 53
Grails Spring Security Core plugin is vulnerable to privilege escalation.
TI-2022-16339 CVE-2022-35912 · GHSA-6rh6-x8ww-9h97
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and…
Priority MEDIUM 47
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by g…
TI-2019-09520 CVE-2019-12728 · GHSA-pmxf-4v8c-rwr7
Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service.
Priority LOW 37
Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service.
TI-2018-15928 CVE-2018-1000529 · GHSA-q25j-gcmv-5qpp
Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in…
Priority LOW 30
Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS .
TI-2014-02947 CVE-2014-3626 · GHSA-983j-49xj-hvgh
Path traversal in Dell EMC Grails by Pivotal
Priority LOW 36
The Grails Resource Plugin often has to exchange URIs for resources with other internal components.
TI-2017-04170 CVE-2017-6344 · GHSA-x232-vpx7-9rvf
XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers…
Priority LOW 29
XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.