Grails · Grails Console · CVE-2016-6521
**Name of the Vulnerable Software and Affected Versions**
Grails console versions 1.5.10 and earlier
Grails console version 2.0.7
**Description**
A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that execute arbitrary Groovy code.
**Recommendations**
For Grails console version 2.0.7, update to a version that fixes this issue.
For Grails console version 1.5.10 and earlier, update to a version that fixes this issue.
As a temporary workaround, consider restricting access to the Grails console to minimize the risk of exploitation.