GHSA-q25j-gcmv-5qpp
Suggest an improvement- Source
- https://github.com/advisories/GHSA-q25j-gcmv-5qpp
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-q25j-gcmv-5qpp/GHSA-q25j-gcmv-5qpp.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-q25j-gcmv-5qpp
- Aliases
- Published
- 2018-10-19T16:46:01Z
- Modified
- 2024-11-18T18:32:30.822864Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- Stored Cross Site Scripting in Grails Fields Plugin
- Details
-
Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in using the display tag that can result in XSS. This vulnerability has been fixed in version 2.2.8.
- Database specific
{ "nvd_published_at": null, "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:50:24Z" }- References
Affected packages
Maven / org.grails.plugins:fields
Package
- Name
- org.grails.plugins:fields
- View open source insights on deps.dev
- Purl
- pkg:maven/org.grails.plugins/fields
Maven / org.grails:grails-core
Package
- Name
- org.grails:grails-core
- View open source insights on deps.dev
- Purl
- pkg:maven/org.grails/grails-core
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.3.6
Affected versions
1.*
1.1-beta1
1.1-beta2
1.1-beta3
1.1-RC1
1.1-RC2
1.1
1.1.1
1.1.2
1.2-M2
1.2-M3
1.2-M4
1.2.0.RC1
1.2.0.RC2
1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0.RC1
1.3.0.RC2
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
2.*
2.0.1
2.0.2
2.0.3
2.0.4
2.1.0.RC1
2.1.0.RC2
2.1.0.RC3
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.2.0.RC1
2.2.0.RC2
2.2.0.RC3
2.2.0.RC4
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0.M1
2.3.0.M2
2.3.0.RC1
2.3.0.RC2
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
2.3.6
2.3.7
2.3.8
2.3.9
2.3.10
2.3.11
2.4.0.M1
2.4.0.M2
2.4.0.RC1
2.4.0.RC2
2.4.0
2.4.1
2.4.2
2.4.3
2.4.4
2.4.5
2.5.0
2.5.1
2.5.2
2.5.3
2.5.4
2.5.5
2.5.6
3.*
3.0.0.M1
3.0.0.M2
3.0.0.RC2
3.0.0.RC3
3.0.0
3.0.1
3.0.3
3.0.4
3.0.5
3.0.6
3.0.9
3.0.10
3.0.11
3.0.12
3.0.13
3.0.14
3.0.15
3.0.16
3.0.17
3.1.0.M2
3.1.0.M3
3.1.0.RC1
3.1.0.RC2
3.1.0
3.1.1
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.9
3.1.10
3.1.11
3.1.12
3.1.13
3.1.15
3.1.16
3.2.0.M1
3.2.0.M2
3.2.0.RC1
3.2.0.RC2
3.2.0
3.2.1
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.2.10
3.2.11
3.2.12
3.3.0.M1
3.3.0.M2
3.3.0.RC1
3.3.0
3.3.1
3.3.2
3.3.3