CVE-2016-6521
Published Jan 23, 2017Cross-site request forgery (CSRF) vulnerability in Grails console (aka Grails Debug Console and Grails Web Console) 2.0.7, 1.5.10, and earlier allows remote attackers to hijack th…
Vendor/product archive
gopivotal / grails CVEs
Beta · best-effort4 CVEs tagged to gopivotal / grails — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2014-2858
Published Apr 15, 2014Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via uns…
CVE-2014-2857
Published Apr 15, 2014The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 does not properly restrict access to files in the META-INF directory, w…
CVE-2014-0053
Published Apr 15, 2014The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, whi…
Showing 1-4 of 4 CVEsPage 1 of 1