CVE-2023-46131CWE-400

Grails® data binding causes JVM crash and/or DoS

Medium · published December 20, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3, 5.3.4, 6.1.0.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00722 · 53.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-12-20T23:24Z
EPSS history
Timeline
  • 20 DEC 23:24Z
    Grails® data binding causes JVM crash and/or DoS
    cvelistv5