Known vulnerabilities in Grails
Vendor:
Grails
Software:
Grails
Software CPE:
cpe:2.3:a:grails.org:grails:*:*:*:*:*:*:*:*
Website:
https://grails.org/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.2.2
7.1.5
7.0.15
7.2.1
7.1.4
7.0.14
7.2.0
7.1.3
7.0.13
7.1.2
7.0.12
7.1.1
7.0.11
7.1.0
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.2.3
6.2.2
6.2.1
6.2.0
6.1.2
4.1.4
5.3.6
3.3.18
5.3.5
6.1.1
3.3.17
4.1.3
5.3.4
6.1.0
6.0.0
5.3.3
5.3.2
5.3.1
5.2.6
5.3.0
5.2.5
5.1.10
5.2.4
5.2.3
4.1.2
3.3.16
5.2.2
5.1.9
3.3.15
4.1.1
5.2.1
5.2.0
5.1.8
4.1.0
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.3
5.0.2
4.0.13
5.0.1
5.0.0
4.0.12
3.3.14
3.3.13
4.0.11
4.0.10
4.0.9
4.0.8
4.0.7
3.3.12
4.0.6
4.0.5
2.0
1.2.0
1.1.0
2.0.6
4.0.4
4.0.3
4.0.2
3.3.11
4.0.1
4.0.0
1.3
1.2
1.1.2
1.1.1
1.0.4
1.0.3
1.0.2
1.0.1
1.0
0.6
0.5.6
0.5.5
0.5
0.4.2
0.4.1
0.4
0.3
0.2
0.1
3.3.10
3.3.9
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.3
3.3.2
3.3.1
3.3.0
3.2.13
3.2.12
3.2.11
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.16
3.1.15
3.1.14
3.1.13
3.1.12
3.1.11
3.1.10
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.17
3.0.16
3.0.15
3.0.14
3.0.13
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.11
2.3.10
2.3.9
2.3.8
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.3.9
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU84656 - Improper input validation CVE-2023-46131 |
CWE-20 | Medium | 3.3.17, 4.1.3, 5.3.4, 6.1.0 | 21.12.2023 |
SB2023122155 |
||
| #VU65766 - Improper Control of Generation of Code ('Code Injection') CVE-2022-35912 |
CWE-94 | High | 3.3.15, 4.1.1, 5.1.9, 5.2.1 | 25.07.2022 |
SB2022072547 |
||
| #VU18734 - Cleartext Transmission of Sensitive Information CVE-2019-12728 |
CWE-319 | Medium | 3.3.10 | 11.06.2019 |
SB2019061102 |
||
| #VU39796 - Cross-Site Request Forgery (CSRF) CVE-2016-6521 |
CWE-352 | High | - | 23.01.2017 |
SB2017012320 |
||
| #VU43455 - Permissions, Privileges, and Access Controls CVE-2012-1833 |
CWE-264 | Medium | - | 29.09.2012 |
SB2012092902 |