com.att.nsa:msgrtr (0.0.5), com.causecode.plugins:mongo-update-embedded (>=0.0.3, <=1.0.0) +86 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (>=1.1-beta1, <=3.3.3)

org.grails:grails-core MAVEN version =1.1-beta1, =0.0.3, =0.4, =5.0.0.rc1, =1.0.0.m1, =6.0.0.rc1, =1.0.0.m1, =5.0.0.rc1, =3.0.0.rc2, =3.0.0.rc2, =1.1-beta1, =1.0.2.release, =1.0.0-m01, =6.1.0.release and more Source cves: CVE-2018-1000529 Source advisory: MEND:CVE-2018-1000529...

Cross-site Scripting (XSS)

Grails-core is vulnerable to cross-site scripting XSS attacks through the default error handler. The default error handler does not sanitize user-input values when displaying an error, allowing an attacker to inject arbitrary Javascript code into a victim's browser...