Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Grails HIGH 7.5
CVE-2023-46131

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or…

Fix: 3.3.17 / 4.1.3+
Fix from $1,950 2023-12-21
Spring Security Core CRITICAL 9.8
CVE-2022-41923

Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint (i.e. the targe…

Fix: 3.3.2 / 4.0.5+
Fix from $2,300 2022-11-23
Grails CRITICAL 9.8
CVE-2022-35912

In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configuration…

Fix: 3.3.15 / 4.1.1+
Fix from $2,300 2022-07-19
Grails HIGH 8.1
CVE-2019-12728

Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext…

Fix: 3.3.10+
Fix from $1,950 2019-06-04
Grails Fields MEDIUM 6.1
CVE-2018-1000529

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnera…

No fix yet
Fix from $1,600 2018-06-26
Resources HIGH 7.5
CVE-2014-3626

The Grails Resource Plugin often has to exchange URIs for resources with other internal components. Those other components will decode any URI passed…

Fix: after 1.2.12
Fix from $1,950 2018-03-19
Pdf Plugin MEDIUM 5.9
CVE-2017-6344

XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.

No fix yet
Fix from $1,600 2017-02-27