6.1
CVSSv3

CVE-2018-1000529

Published: 26/06/2018 Updated: 28/08/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

grails grails fields 2.2.7

Github Repositories

CVE-2018-1000529 NVD CVE-2018-1000529: nvdnistgov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: cvemitreorg/cgi-bin/cvenamecgi?name=2018-1000529 Stored XSS in Grails Fields Plugin <=227 This repository was used to demonstrate a proof of concept of the vulnerability for the responsible disclosure to the Grails team The XSS vulnerability is p