io.github.gpc:cascade-validation (4.0.0), io.github.gpc:grails-cascade-validation (4.0.0) +19 more potentially affected by CVE-2022-35912 via org.grails:grails-databinding (>=4.0.10, <=4.1.0)

org.grails:grails-databinding MAVEN version =4.0.10, =4.0.0.rc1, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.1.0 and more Source cves: CVE-2022-35912 Source advisory: MEND:CVE-2022-35912...

io.github.gpc:asynchronous-mail (>=3.1.0, <=3.1.1), io.github.longwa:build-test-data (5.0.0) +23 more potentially affected by CVE-2022-35912 via org.grails:grails-databinding (>=5.0.0, <=5.1.8)

org.grails:grails-databinding MAVEN version =5.0.0, =3.1.0, =4.0.0, =5.0.1, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.1.8 and more Source cves: CVE-2022-35912 Source advisory: MEND:CVE-2022-35912...

org.grails:grails-plugin-codecs (5.2.0), org.grails:grails-plugin-controllers (5.2.0) +14 more potentially affected by CVE-2022-35912 via org.grails:grails-databinding (5.2.0)

org.grails:grails-databinding MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-databinding and may be impacted: - org.grails:grails-plugin-codecs 5.2.0 - org.grails:grails-plugin-controllers 5.2.0 -...

CVE-2022-35912

CVE-2022-35912 is a Grails data-binding remote code execution vulnerability. In grails-databinding, versions prior to 3.3.15, 4.x prior to 4.1.1, 5.x prior to 5.1.9, and 5.2.x prior to 5.2.1 can allow a remote attacker to execute code by gaining access to the class loader when certain Java 8 conf...

CVE-2022-35912

In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 at least when certain Java 8 configurations are used, data binding allows a remote attacker to execute code by gaining access to the class loader...

CVE-2022-35912

In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 at least when certain Java 8 configurations are used, data binding allows a remote attacker to execute code by gaining access to the class loader...

CVE-2022-35912: Undefined Security Weakness

In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 at least when certain Java 8 configurations are used, data binding allows a remote attacker to execute code by gaining access to the class loader...

org.codehaus.fabric3:fabric3-databinding-json (>=1.1, <=1.5), org.codehaus.fabric3:profile-net (>=1.1, <=1.5) +1 more potentially affected by CVE-2019-10202 via org.codehaus.jackson:jackson-mapper-asl (0.9.9-4)

org.codehaus.jackson:jackson-mapper-asl MAVEN version 0.9.9-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.jackson:jackson-mapper-asl and may be impacted: - org.codehaus.fabric3:fabric3-databinding-json =1.1, =1.1, =1.5 -...

io.github.gferrariuy:axis-rt-databinding-castor (1.4.1.1), io.github.gferrariuy:axis1-maintained (1.4.1.1) potentially affected by CVE-2014-3004 via castor:castor (0.9.4.2)

castor:castor MAVEN version 0.9.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on castor:castor and may be impacted: - io.github.gferrariuy:axis-rt-databinding-castor 1.4.1.1 - io.github.gferrariuy:axis1-maintained 1.4.1.1 Source cves: CVE-2014-3004...

[SECURITY] Fedora 34 Update: php-laminas-form-2.17.1-1.fc34

The Laminas\Form is intended primarily as a bridge between your domain models and the View Layer. It composes a thin layer of objects representing form elements, an InputFilter, and a small number of methods for binding data to and from the form and attached objects. Documentation:...

org.codehaus.fabric3:fabric3-databinding-json (>=1.1, <=1.5), org.codehaus.fabric3:profile-net (>=1.1, <=1.5) +1 more potentially affected by CVE-2019-10172 via org.codehaus.jackson:jackson-mapper-asl (0.9.9-4)

org.codehaus.jackson:jackson-mapper-asl MAVEN version 0.9.9-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.jackson:jackson-mapper-asl and may be impacted: - org.codehaus.fabric3:fabric3-databinding-json =1.1, =1.1, =1.5 -...

org.apache.camel:camel-cxf (2.9.0), org.apache.camel:camel-example-cxf (2.9.0) +94 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.5.1)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.camel:camel-cxf 2.9.0 - org.apache.camel:camel-example-cxf 2.9.0 -...

Spring WebFlow remote code execution vulnerability analysis(CVE-2017-4971)-vulnerability warning-the black bar safety net

In order to better and the majority of security enthusiasts, we build a community, the community mainly focused on the threats found and security data analysis and other fields, we hope to have more friends to join, together with the analysis of knowledge and common progress. Community address: ,...