CVE-2014-2858
Beschrijving NL
Directory traversal-kwetsbaarheid in de Resources-plug-in 1.0.0 vóór 1.2.6 voor Pivotal Grails 2.0.0 tot 2.3.6 stelt externe aanvallers in staat om gevoelige informatie te verkrijgen via niet-gespecificeerde vectoren met betrekking tot een "geconfigureerd blok." NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types.
Origineel (Engels) tonen
Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a "configured block." NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types.