CVEvulnerability

CVE-2012-1833

5.0 MEDIUM Published 2012-09-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264

Description

VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers to bypass intended access restrictions and modify arbitrary object properties via a crafted request parameter to an application.

Affected configurations

• springsource grails (<= 1.3.7) • springsource grails 1.1.0 • springsource grails 1.1.1 • springsource grails 1.1.2 • springsource grails 1.2.0 • springsource grails 1.2.1 • springsource grails 1.2.2 • springsource grails 1.3.0 • springsource grails 1.3.1 • springsource grails 1.3.2 • springsource grails 1.3.3 • springsource grails 1.3.4 • springsource grails 1.3.5 • springsource grails 1.3.6 • springsource grails 2.0 • springsource grails 2.0.1

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes weakness

References