Back to search
CVE-2014-0053
Published: Apr 15, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, which allows remote attackers to obtain sensitive information via a direct request. NOTE: this identifier has been SPLIT due to different researchers and different vulnerability types. See CVE-2014-2857 for the META-INF variant and CVE-2014-2858 for the directory traversal.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
56841
third-party-advisory
x_refsource_SECUNIA
grails-cve20140053-info-disc(91270)
vdb-entry
x_refsource_XF
20140227 Update: CVE-2014-0053 Information Disclosure when using Grails
mailing-list
x_refsource_BUGTRAQ
65678
vdb-entry
x_refsource_BID
http://www.gopivotal.com/security/cve-2014-0053
x_refsource_CONFIRM
https://twitter.com/Ramsharan065/status/434975409134792704
x_refsource_MISC
20140227 Update: CVE-2014-0053 Information Disclosure when using Grails
mailing-list
x_refsource_FULLDISC
20140219 CVE-2014-0053 Information Disclosure when using Grails
mailing-list
x_refsource_FULLDISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now