org.grails:grails-crud (1.1-beta3), org.grails:grails-gorm (1.1-beta3) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.1-beta3)

org.grails:grails-core MAVEN version 1.1-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1-beta3 - org.grails:grails-gorm 1.1-beta3 - org.grails:grails-maven-plugin 1.0-beta3 ...

org.grails:grails-crud (1.2.0), org.grails:grails-gorm (1.2.0) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.2.0)

org.grails:grails-core MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.0 - org.grails:grails-gorm 1.2.0 - org.grails:grails-maven-plugin 1.2.0 -...

org.grails:grails-crud (1.2.1), org.grails:grails-gorm (1.2.1) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.2.1)

org.grails:grails-core MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.1 - org.grails:grails-gorm 1.2.1 - org.grails:grails-maven-plugin 1.2.1 -...

org.grails:grails-crud (1.2.5), org.grails:grails-gorm (1.2.5) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.2.5)

org.grails:grails-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.5 - org.grails:grails-gorm 1.2.5 - org.grails:grails-scripts 1.2.5 - org.grails:grails-w...

org.grails:grails-crud (1.3.1), org.grails:grails-gorm (1.3.1) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.3.1)

org.grails:grails-core MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.3.1 - org.grails:grails-gorm 1.3.1 - org.grails:grails-scripts 1.3.1 - org.grails:grails-w...

org.grails:grails-crud (1.1-beta1), org.grails:grails-gorm (1.1-beta1) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.1-beta1)

org.grails:grails-core MAVEN version 1.1-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1-beta1 - org.grails:grails-gorm 1.1-beta1 - org.grails:grails-scripts 1.1-beta1 -...

org.grails:grails-crud (1.1-beta2), org.grails:grails-gorm (1.1-beta2) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.1-beta2)

org.grails:grails-core MAVEN version 1.1-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1-beta2 - org.grails:grails-gorm 1.1-beta2 - org.grails:grails-maven-plugin 0.4 -...

org.grails:grails-crud (1.1-rc1), org.grails:grails-gorm (1.1-rc1) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.1-rc1)

org.grails:grails-core MAVEN version 1.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1-rc1 - org.grails:grails-gorm 1.1-rc1 - org.grails:grails-maven-plugin 1.0-rc1 -...

org.grails:grails-crud (1.1.1), org.grails:grails-gorm (1.1.1) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.1.1)

org.grails:grails-core MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1.1 - org.grails:grails-gorm 1.1.1 - org.grails:grails-scripts 1.1.1 - org.grails:grails-w...

org.grails:grails-crud (1.2-m3), org.grails:grails-docs (1.2-m3) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.2-m3)

org.grails:grails-core MAVEN version 1.2-m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2-m3 - org.grails:grails-docs 1.2-m3 - org.grails:grails-gorm 1.2-m3 -...

org.grails:grails-crud (1.2.0.rc1), org.grails:grails-gorm (1.2.0.rc1) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.2.0.rc1)

org.grails:grails-core MAVEN version 1.2.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.0.rc1 - org.grails:grails-gorm 1.2.0.rc1 - org.grails:grails-scripts 1.2.0.rc1 -...

org.grails:grails-crud (1.2.0.rc2), org.grails:grails-gorm (1.2.0.rc2) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.2.0.rc2)

org.grails:grails-core MAVEN version 1.2.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.2.0.rc2 - org.grails:grails-gorm 1.2.0.rc2 - org.grails:grails-scripts 1.2.0.rc2 -...

org.codehaus.geb:geb-grails (>=0.4, <=0.5.1), org.grails:grails-crud (1.2.3) +5 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.2.3)

org.grails:grails-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.codehaus.geb:geb-grails =0.4, =0.5.1 - org.grails:grails-crud 1.2.3 - org.grails:grails-gorm 1.2.3 -...

org.grails:grails-crud (1.3.0), org.grails:grails-gorm (1.3.0) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.3.0)

org.grails:grails-core MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.3.0 - org.grails:grails-gorm 1.3.0 - org.grails:grails-scripts 1.3.0 - org.grails:grails-w...

org.grails:grails-crud (1.3.5), org.grails:grails-gorm (1.3.5) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.3.5)

org.grails:grails-core MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.3.5 - org.grails:grails-gorm 1.3.5 - org.grails:grails-scripts 1.3.5 - org.grails:grails-w...

org.grails:grails-crud (1.1.2), org.grails:grails-gorm (1.1.2) +3 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.1.2)

org.grails:grails-core MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1.2 - org.grails:grails-gorm 1.1.2 - org.grails:grails-scripts 1.1.2 - org.grails:grails-w...

org.grails:grails-crud (1.1), org.grails:grails-gorm (1.1) +4 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (1.1)

org.grails:grails-core MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-crud 1.1 - org.grails:grails-gorm 1.1 - org.grails:grails-maven-plugin =1.0, =1.1 -...

Data Binding Expression Vulnerability

spring-webflow is vulnerable to a data binding expression vulnerability. The vulnerability is caused when the MvcViewFactoryCreator useSpringBinding property is set to false by default. Therefore, applications which use the default settings are vulnerable to malicious EL expressions in view state...

CVE-2017-4971: Spring WebFlow remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Spring severe of these vulnerabilities have traditionally not too much, before the more serious that problem is Spring's JavaBean automatic binding function, the result can be control class, which can lead to the use of certain characteristics of the execution of arbitrary code, but that...

Spring WebFlow remote code execution vulnerability analysis(CVE-2017-4971)-vulnerability warning-the black bar safety net

In order to better and the majority of security enthusiasts, we build a community, the community mainly focused on the threats found and security data analysis and other fields, we hope to have more friends to join, together with the analysis of knowledge and common progress. Community address: ,...