Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Berdario

#29365de 53,633
8.8CVSS total
Vulnerabilidades · 1
PT-2017-8988
8.8
2017-01-23
Grails · Grails Console · CVE-2016-6521
**Name of the Vulnerable Software and Affected Versions** Grails console versions 1.5.10 and earlier Grails console version 2.0.7 **Description** A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that execute arbitrary Groovy code. **Recommendations** For Grails console version 2.0.7, update to a version that fixes this issue. For Grails console version 1.5.10 and earlier, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the Grails console to minimize the risk of exploitation.