Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by gaining access to the class loader.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Grails 代码注入漏洞
Vulnerability Description
Grails是Grails项目的一套基于Groovy编程语言且用于快速开发Web应用的开源框架。 Grails-databinding 3.3.15之前版本、4.1.1之前的4.x版本、5.1.9之前的5.x版本和5.2.1之前的5.2.x版本存在安全漏洞，该漏洞源于在使用某些Java 8配置时，数据绑定允许远程攻击者通过获得对类加载器的访问执行代码。
CVSS Information
N/A
Vulnerability Type
N/A