High severity8.1NVD Advisory· Published Jun 4, 2019· Updated Jun 17, 2026

CVE-2019-12728

Description

Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.grails:grails-coreMaven	< 3.3.10	3.3.10

Affected products

Grails/Grails
cpe:2.3:a:grails:grails:*:*:*:*:*:*:*:*
Range: <3.3.10
Grails/Grailsdescription
ghsa-coords
pkg:maven/org.grails/grails-core
Range: < 3.3.10

Patches

Vulnerability mechanics

References

github.com/grails/grails-core/issues/11250nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-pmxf-4v8c-rwr7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-12728ghsaADVISORY
objectcomputing.com/news/2019/05/30/possible-grails-mitm-vulnerabilitynvdThird Party AdvisoryWEB

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000