Skip to content
OpenAdvisories

Package · Maven

org.grails:grails-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2019-12728

    Incorrect Resource Transfer Between Spheres in Grails

    Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP.

    org.grails:grails-core Maven
  • Medium 6.1
    CVE-2018-1000529 Public exploit

    Stored Cross Site Scripting in Grails Fields Plugin

    Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.

    org.grails:grails-core org.grails.plugins:fields Maven