CVE-2012-1833

Published: Sep 28, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers to bypass intended access restrictions and modify arbitrary object properties via a crafted request parameter to an application.

Affected (16)

Products: Springsource: Grails

Springsource

1 product

Grails

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Springsource Grails	Up to 1.3.7
Springsource Grails	Version 1.1.0
Springsource Grails	Version 1.1.1
Springsource Grails	Version 1.1.2
Springsource Grails	Version 1.2.0
Springsource Grails	Version 1.2.1
Springsource Grails	Version 1.2.2
Springsource Grails	Version 1.3.0
Springsource Grails	Version 1.3.1
Springsource Grails	Version 1.3.2
Springsource Grails	Version 1.3.3
Springsource Grails	Version 1.3.4
Springsource Grails	Version 1.3.5
Springsource Grails	Version 1.3.6
Springsource Grails	Version 2.0.1
Springsource Grails	Version 2.0