Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
asset pipeline project asset-pipeline vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2018-1000817
Asset Pipeline Grails Plugin Asset-pipeline plugin version before 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerability in Applications deployed in Jetty that can result in Download .class files and any arbitrary file. This attack appear to be exploitable v...
Asset Pipeline Project Asset-pipeline
7.5
CVSSv3
CVE-2018-17605
An issue exists in the Asset Pipeline plugin prior to 3.0.4 for Grails. An attacker can perform directory traversal via a crafted request when a servlet-based application is executed in Jetty, because there is a classloader vulnerability that can allow a reverse file traversal ro...
Asset Pipeline Project Asset-pipeline
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started