Maven package
org.grails/grails-databinding
pkg:maven/org.grails/grails-databinding
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-46131 | Med | 6.5 | >= 6.0.0, < 6.1.0 | 6.1.0 | Dec 21, 2023 | Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in versio | |
| CVE-2022-35912 | Cri | 9.8 | >= 3.3.10, < 3.3.15 | 3.3.15 | Jul 19, 2022 | In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by gaining access to the class loader. |
- affected >= 6.0.0, < 6.1.0fixed 6.1.0
Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in versio
- affected >= 3.3.10, < 3.3.15fixed 3.3.15
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by gaining access to the class loader.