CVE-2023-46131

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Dec 21, 2023

Updated: Jan 2, 2024

CWE ID 400

Summary

CVE-2023-46131 is a vulnerability affecting Grails, a popular framework for building web applications using the Groovy programming language. Maliciously crafted web requests can trigger a JVM crash or denial of service in Grails applications utilizing data binding. This issue, which has been addressed in versions 3.3.17, 4.1.3, 5.3.4, and 6.1.0 of the framework, allows an attacker to disrupt the availability of affected web applications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Grails

Affected Vendors

Grails

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/tCGFTw
https://www.cve.org/CVERecord?id=CVE-2023-46131
https://nvd.nist.gov/vuln/detail/CVE-2023-46131

Back to Vulnerability Database