Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
asset pipeline project asset-pipeline vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2018-17605
An issue exists in the Asset Pipeline plugin prior to 3.0.4 for Grails. An attacker can perform directory traversal via a crafted request when a servlet-based application is executed in Jetty, because there is a classloader vulnerability that can allow a reverse file traversal ro...
Asset Pipeline Project Asset-pipeline
7.5
CVSSv3
CVE-2018-1000817
Asset Pipeline Grails Plugin Asset-pipeline plugin version before 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerability in Applications deployed in Jetty that can result in Download .class files and any arbitrary file. This attack appear to be exploitable v...
Asset Pipeline Project Asset-pipeline
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000
CVE-2024-4439
unauthorized
CVE-2024-0042
CVE-2024-31848
CVE-2023-40694
cache poisoning
CVE-2024-23707
firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started