CVE-2012-1833 | BDVDB-2026-52685 Detail

Description#

VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers to bypass intended access restrictions and modify arbitrary object properties via a crafted request parameter to an application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/51113
http://www.securityfocus.com/bid/55763
http://support.springsource.com/security/cve-2012-1833

Exploit#

No public exploit known

History#

Version 12012-09-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.