166 matches found
grails3-cve-2022-27772
grails3-cve-2022-27772 The Grails® framework 3.3 application provides custom implementation for TomcatEmbeddedServletContainerFactory which overrides createTempDirectory method implementation. The custom implementation is then used to create EmbeddedServletContainer bean from Application.groovy...
CVE-2018-1000529
CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 Stored XSS in Grails Fields Plugin =2.2.7 This repository was used to demonstrate a proof of concept of the vulnerability fo...
grails-javamelody-sample-app
Grails Javamelody Sample App Grails sample application using the Javamelody plugin version 1.44 to illustrate the CVE-2013-4378 vulnerability...
GSSC-CVE-2022-41923
Workaround for CVE-2022-41923: Privilege Management Vulnerability Summary The vulnerability CVE-2022-41923 found in the unpatched Grails Spring Security Core GSSC plugin can result in improper privilege management. This repository describes how to work around the issue. If you are using an...
PT-2026-73075
Name of the Vulnerable Software and Affected Versions OpenBoxes versions prior to 0.9.8-hotfix1 Description An issue exists in the Template Processing component where the buildZebraTemplate function in the grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy file fails to...
CLSA-2026-1786609421 TuxCare security update for org.grails (17 CVEs)
TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1...
com.agorapulse:gru-micronaut (1.4.0), com.bertramlabs.plugins:asset-pipeline-grails (>=4.5.0, <=4.5.2) +155 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (>=3.10.0, <=3.10.5)
io.micronaut:micronaut-inject MAVEN version =3.10.0, =4.5.0, =4.5.2 - dev.elide:elide-base-jvm 1.0-v3-alpha4-b11 - dev.elide:elide-proto-core-jvm 1.0-v3-alpha4-b11 - dev.elide:elide-proto-flatbuffers 1.0-v3-alpha4-b11 - dev.elide:elide-proto-kotlinx-jvm 1.0-v3-alpha4-b11 -...
com.agorapulse:gru-micronaut (1.4.0), com.bertramlabs.plugins:asset-pipeline-grails (>=4.5.0, <=4.5.2) +155 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (>=3.10.0, <=3.10.5)
io.micronaut:micronaut-inject MAVEN version =3.10.0, =4.5.0, =4.5.2 - dev.elide:elide-base-jvm 1.0-v3-alpha4-b11 - dev.elide:elide-proto-core-jvm 1.0-v3-alpha4-b11 - dev.elide:elide-proto-flatbuffers 1.0-v3-alpha4-b11 - dev.elide:elide-proto-kotlinx-jvm 1.0-v3-alpha4-b11 -...
CVE-2022-35912
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 at least when certain Java 8 configurations are used, data binding allows a remote attacker to execute code by gaining access to the class loader...
EUVD-2017-15405
Malware in sbrugna...
EUVD-2018-0655
Malware in sbrugna...
EUVD-2014-2882
Malware in sbrugna...
EUVD-2016-7442
Malware in sbrugna...
EUVD-2012-1843
Malware in sbrugna...
EUVD-2014-2881
Malware in sbrugna...
EUVD-2014-3586
Malware in sbrugna...
EUVD-2014-0148
Malware in sbrugna...
EUVD-2022-3922
Malicious code in bioql PyPI...