CVE-2022-35912
19.07.2022, 16:15
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by gaining access to the class loader.Enginsight
| Vendor | Product | Version |
|---|---|---|
| grails | grails | 3.3.10 ≤ 𝑥 < 3.3.15 |
| grails | grails | 4.0.0 ≤ 𝑥 < 4.1.1 |
| grails | grails | 5.0.0 ≤ 𝑥 < 5.1.9 |
| grails | grails | 5.2.0 |
𝑥
= Vulnerable software versions
References