org.grails:grails-crud (1.2.2), org.grails:grails-gorm (1.2.2) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.2.2)

org.grails:grails-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.2 - org.grails:grails-gorm 1.2.2 - org.grails:grails-maven-plugin 1.2.2 -...

org.grails:grails-crud (1.3.6), org.grails:grails-gorm (1.3.6) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.3.6)

org.grails:grails-core MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.3.6 - org.grails:grails-gorm 1.3.6 - org.grails:grails-maven-plugin 1.3.6 -...

org.grails:grails-plugin-testing (2.0.2) potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.0.2)

org.grails:grails-core MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-plugin-testing 2.0.2 Source cves: CVE-2018-1000529 Source advisory: OSV:GHSA-Q25J-GCMV-5QPP...

org.grails:grails-dependencies (2.1.0.rc1) potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.1.0.rc1)

org.grails:grails-core MAVEN version 2.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.1.0.rc1 Source cves: CVE-2018-1000529 Source advisory: OSV:GHSA-Q25J-GCMV-5QPP...

org.grails:grails-dependencies (2.2.0.rc2), org.grails:grails-hibernate (2.2.0.rc2) +17 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.2.0.rc2)

org.grails:grails-core MAVEN version 2.2.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.2.0.rc2 - org.grails:grails-hibernate 2.2.0.rc2 - org.grails:grails-logging...

org.grails:grails-dependencies (2.2.4), org.grails:grails-hibernate (2.2.4) +16 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.2.4)

org.grails:grails-core MAVEN version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.2.4 - org.grails:grails-hibernate 2.2.4 - org.grails:grails-logging 2.2.4 -...

org.grails:grails-dependencies (2.2.5), org.grails:grails-hibernate (2.2.5) +16 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.2.5)

org.grails:grails-core MAVEN version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.2.5 - org.grails:grails-hibernate 2.2.5 - org.grails:grails-logging 2.2.5 -...

org.grails:grails-datastore-gorm (>=2.0.0.m2, <=2.0.0.m3), org.grails:grails-datastore-gorm-hibernate (>=2.0.0.m2, <=2.0.0.m3) +24 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.0.m1)

org.grails:grails-core MAVEN version 2.3.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm =2.0.0.m2, =2.0.0.m2, =2.0.0.m2, =2.0.0.m2, =2.0.0.m2, =2.0.0.m2, =2.0.0.m3 -...

org.grails:grails-logging (2.3.0.m2), org.grails:grails-plugin-async (2.3.0.m2) +19 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.0.m2)

org.grails:grails-core MAVEN version 2.3.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-logging 2.3.0.m2 - org.grails:grails-plugin-async 2.3.0.m2 - org.grails:grails-plugin-codecs...

org.grails:grails-crud (1.1-beta3), org.grails:grails-gorm (1.1-beta3) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.1-beta3)

org.grails:grails-core MAVEN version 1.1-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1-beta3 - org.grails:grails-gorm 1.1-beta3 - org.grails:grails-maven-plugin 1.0-beta3 ...

com.causecode.plugins:mongo-update-embedded (>=0.0.3, <=1.0.0), io.springfox.grails:springfox-grails (1.0.0) +62 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (>=3.0.0.m1, <=3.3.3)

org.grails:grails-core MAVEN version =3.0.0.m1, =0.0.3, =5.0.0.rc1, =5.0.0.rc1, =6.0.0.rc1, =5.0.0.rc1, =5.0.0.rc1, =3.0.0.rc2, =3.0.0.rc2, =4.0.0.m1, =4.0.0.rc1, =4.0.0.rc1, =4.0.0.rc1, =4.0.0.rc1, =5.0.0.rc1, =6.0.12.release and more Source cves: CVE-2018-1000529 Source advisory:...

Stored Cross Site Scripting in Grails Fields Plugin

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in using the display tag that can result in XSS. This vulnerability has been fixed in version 2.2.8...

GHSA-Q25J-GCMV-5QPP Stored Cross Site Scripting in Grails Fields Plugin

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting XSS vulnerability in using the display tag that can result in XSS. This vulnerability has been fixed in version 2.2.8...

org.grails:grails-dependencies (2.1.0.rc3) potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.1.0.rc3)

org.grails:grails-core MAVEN version 2.1.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.1.0.rc3 Source cves: CVE-2018-1000529 Source advisory: OSV:GHSA-Q25J-GCMV-5QPP...

org.grails:grails-crud (1.3.1), org.grails:grails-gorm (1.3.1) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.3.1)

org.grails:grails-core MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.3.1 - org.grails:grails-gorm 1.3.1 - org.grails:grails-scripts 1.3.1 - org.grails:grails-w...

Asset Pipeline Catalog Traversal Vulnerability

Grails is the Grails project to develop a set of Groovy-based programming language and for rapid development of Web applications and open source frameworks . Asset Pipeline plugin is used in one of the plug-ins used to deal with static resources . Grails Asset Pipeline plugin version 3.0.4 before...

CVE-2018-17605

An issue was discovered in the Asset Pipeline plugin before 3.0.4 for Grails. An attacker can perform directory traversal via a crafted request when a servlet-based application is executed in Jetty, because there is a classloader vulnerability that can allow a reverse file traversal route in...

CVE-2018-17605

An issue was discovered in the Asset Pipeline plugin before 3.0.4 for Grails. An attacker can perform directory traversal via a crafted request when a servlet-based application is executed in Jetty, because there is a classloader vulnerability that can allow a reverse file traversal route in...

Directory traversal

An issue was discovered in the Asset Pipeline plugin before 3.0.4 for Grails. An attacker can perform directory traversal via a crafted request when a servlet-based application is executed in Jetty, because there is a classloader vulnerability that can allow a reverse file traversal route in...

CVE-2018-17605

CVE-2018-17605 affects the Asset Pipeline plugin for Grails (versions before 3.0.4). A directory traversal flaw exists when a servlet-based application runs in Jetty, due to a classloader vulnerability that enables a reverse file traversal path via AssetPipelineFilter.groovy or AssetPipelineFilte...