Remote Code Execution (RCE)

🗓️ 20 Jul 2022 04:31:18Reported by Veracode Vulnerability DatabaseType

org.grails, grails-databinding remote code execution vulnerabilit

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-35912	19 Jul 202216:15	–	attackerkb
Circl	CVE-2022-35912	19 Jul 202220:40	–	circl
CNNVD	Grails 代码注入漏洞	19 Jul 202200:00	–	cnnvd
CVE	CVE-2022-35912	19 Jul 202215:56	–	cve
Cvelist	CVE-2022-35912	19 Jul 202215:56	–	cvelist
EUVD	EUVD-2022-6263	3 Oct 202520:07	–	euvd
Github Security Blog	Grails framework Remote Code Execution via Data Binding	21 Jul 202221:38	–	github
NVD	CVE-2022-35912	19 Jul 202216:15	–	nvd
OSV	GHSA-6RH6-X8WW-9H97 Grails framework Remote Code Execution via Data Binding	21 Jul 202221:38	–	osv
Prion	Code injection	19 Jul 202216:15	–	prion

Vulners

Node

grails-databinding grails-databindingRange3.0.0.BUILD-SNAPSHOT–3.3.15.BUILD-SNAPSHOTjava

grails-databinding grails-databindingRange4.0.0.BUILD-SNAPSHOT–4.1.1-SNAPSHOTjava

grails-databinding grails-databindingRange5.0.0.BUILD-SNAPSHOT–5.1.8java

grails-databinding grails-databindingRange2.3.0.BUILD-SNAPSHOT–2.5.6java

Source	Link
github	www.github.com/grails/grails-core/issues/12626
github	www.github.com/grails/grails-core/pull/12606
github	www.github.com/grails/grails-core/pull/12620
github	www.github.com/grails/grails-core/pull/12621
github	www.github.com/grails/grails-core/commit/c8bb44e13b905d32291aeaace31b762ee8a76e5a
github	www.github.com/grails/grails-core/commit/d39324446b81774a8e7af9cdace9c00ede2ede16
github	www.github.com/grails/grails-core/commit/34bbedb1497eb25bd9cb0d876192877aad777005
github	www.github.com/grails/grails-core/commit/d3edcf2a1ab0bb1debc10c8d96e799886e90e124
github	www.github.com/grails/grails-core/security/advisories/GHSA-6rh6-x8ww-9h97
grails	www.grails.org/blog/2022-07-18-rce-vulnerability.html

28 Jul 2022 00:21Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.04713