Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Berdario

#28768of 53,630
8.8Total CVSS
Vulnerabilities · 1
PT-2017-8988
8.8
2017-01-23
Grails · Grails Console · CVE-2016-6521
**Name of the Vulnerable Software and Affected Versions** Grails console versions 1.5.10 and earlier Grails console version 2.0.7 **Description** A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that execute arbitrary Groovy code. **Recommendations** For Grails console version 2.0.7, update to a version that fixes this issue. For Grails console version 1.5.10 and earlier, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the Grails console to minimize the risk of exploitation.