CVE-2019-12728

Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP...

PCoIP Management Console – Potential Denial of Service

A vulnerability has been reported in the Grails open-source web framework used by Teradici PCoIP Management Console, which might potentially lead to a JVM crash or denial of service. An updated Teradici PCoIP Management Console has been released to mitigate this issue. Customers using Management...

Denial Of Service Attack

org.grails:grails-databinding is vulnerable to Denial Of Service Attack. The vulnerability is due to a lack of validation in processing of web requests. An attacker can send specially crafted requests to cause a JVM crash or Denial of Service...

CVE-2023-46131

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3,...

Code injection

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3,...

CVE-2023-46131 Grails® data binding causes JVM crash and/or DoS

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3,...

CVE-2023-46131

CVE-2023-46131 — Grails data binding DoS : A vulnerability in Grails data binding allows a specially crafted web request to cause a JVM crash or denial of service. Affected: Grails framework applications using data binding. Root cause: improper handling in data binding exposed to request data (as...

CVE-2023-46131 Grails® data binding causes JVM crash and/or DoS

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3,...

io.github.gpc:cascade-validation (=4.0.0), io.github.gpc:grails-cascade-validation (=4.0.0) +19 more potentially affected by CVE-2023-46131 via org.grails:grails-databinding (>=4.0.10 <=4.1.2)

org.grails:grails-databinding MAVEN version =4.0.10, =4.0.0-1, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.0.10, =4.1.2 and more Source cves: CVE-2023-46131 Source advisory: OSV:GHSA-3PJV-R7W4-2CF5...

io.github.matrei:grails-inertia-plugin (=2.0.0), org.grails.plugins:gsp (>=6.0.1 <=6.0.3) +22 more potentially affected by CVE-2023-46131 via org.grails:grails-databinding (=6.0.0)

org.grails:grails-databinding MAVEN version =6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-databinding and may be impacted: - io.github.matrei:grails-inertia-plugin =2.0.0 - org.grails.plugins:gsp =6.0.1, =6.0.3 -...

io.springfox.grails:springfox-grails (=1.0.0), org.grails:gorm-cassandra-spring-boot (=5.0.0.RC1) +54 more potentially affected by CVE-2023-46131 via org.grails:grails-databinding (>=2.3.0 <=3.2.9)

org.grails:grails-databinding MAVEN version =2.3.0, =3.0.0, =6.0.0.M2, =2.0.0.M2, =2.0.0.M2, =5.0.0.RC1 - org.grails:grails-datastore-gorm-hibernate5 =5.0.0.RC1 - org.grails:grails-datastore-gorm-mongodb =5.0.0.RC1 - org.grails:grails-datastore-gorm-neo4j =5.0.0.RC1 -...

io.github.dem07:maintenance-mode (=1.0.0), io.github.gpc:asynchronous-mail (>=3.1.0 <=3.1.2) +33 more potentially affected by CVE-2023-46131 via org.grails:grails-databinding (>=5.0.0 <=5.3.3)

org.grails:grails-databinding MAVEN version =5.0.0, =3.1.0, =1.1.0, =4.0.0, =5.0.0.RC2, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.3.3 and more Source cves: CVE-2023-46131 Source advisory: OSV:GHSA-3PJV-R7W4-2CF5...

Grails data binding causes JVM crash and/or other denial of service

Impact A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. Patches Patches are available for Grails 3 and later. Workarounds No workaround is possible except to avoid data binding to request data...

GHSA-3PJV-R7W4-2CF5 Grails data binding causes JVM crash and/or other denial of service

Impact A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. Patches Patches are available for Grails 3 and later. Workarounds No workaround is possible except to avoid data binding to request data...

Grails Resource Management Error Vulnerability

Grails is a suite of open source frameworks for rapid web application development based on the Groovy programming language from the Grails project. Grails suffers from a resource management error vulnerability that originates from allowing an attacker to cause a denial of service DOS to the JVM v...

PT-2023-29864 · Grails · Grails

Name of the Vulnerable Software and Affected Versions: Grails versions prior to 3.3.17 Grails versions prior to 4.1.3 Grails versions prior to 5.3.4 Grails versions prior to 6.1.0 Description: A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework...

CVE-2022-41923

Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint i.e. the targeted endpoint using the authorization requirements of a different endpoint i.e. the donor endpoint. In some Grails framework applications, access to t...

Privilege escalation

Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint i.e. the targeted endpoint using the authorization requirements of a different endpoint i.e. the donor endpoint. In some Grails framework applications, access to t...

CVE-2022-41923

The CVE-2022-41923 entry describes a privilege-escalation vulnerability in Grails Spring Security Core (GSSC) plugin, where an attacker can access a targeted endpoint using the authorization of a donor endpoint. Affected plugin versions include 1.x, 2.x, 3.0.0–3.3.1, 4.0.0–4.0.4, and 5.0.0–5.1.0....

Grails 安全漏洞

Grails is a set of Grails project based on the Groovy programming language and used for rapid development of Web applications open source framework. A security vulnerability exists in Grails Spring Security Core, which is vulnerable to privilege escalation. The following products and versions are...