3 matches found
CVE-2019-12728
Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP...
9.2CVSS0.00974EPSS
SaveExploits1References3
PT-2019-12903
Name of the Vulnerable Software and Affected Versions Grails versions prior to 3.3.10 Description The issue concerns the use of cleartext HTTP to resolve the SDKMan notification service. It is noted that users' apps were not resolving dependencies over cleartext HTTP. Recommendations For versions...
8.1CVSS0.00974EPSS
SaveExploits1References5
CVE-2019-12728: Download of Code Without Integrity Check
Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP...
8.1CVSS5.8AI score0.00974EPSS
SaveExploits1References2
20