Maven/org.grails.plugins:asset-pipeline CVE-2018-17605: high 7.5, EPSS 2.19%
Asset Pipeline plugin for Grails vulnerable to Path Traversal
Action: Upgrade org.grails.plugins:asset-pipeline to 3.0.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.4 | - |
Fixed versions
| 3.0.4 |
Sources
- osv: GHSA-g7wm-22m6-5774
- https://nvd.nist.gov/vuln/detail/CVE-2018-17605
- https://github.com/grails/grails-core/issues/11068
- https://github.com/bertramdev/asset-pipeline/commit/a29533c52e4b60e244082433e116d2a038d01017
CVE-2018-17605 · published · modified · JSON