CVE

Id
93341  
CVE No.
CVE-2016-6521  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in Grails console (aka Grails Debug Console and Grails Web Console) 2.0.7, 1.5.10, and earlier allows remote attackers to hijack the authentication of users for requests that execute arbitrary Groovy code via unspecified vectors.  
Phase
Assigned (20160802)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793550 93341 CVE-2016-6521 MLIST:[oss-security] 20160801 CVE Request: CSRF in Grails console  View
793551 93341 CVE-2016-6521 URL:http://www.openwall.com/lists/oss-security/2016/08/02/2  View
793552 93341 CVE-2016-6521 MLIST:[oss-security] 20160802 Re: CVE Request: CSRF in Grails console  View
793553 93341 CVE-2016-6521 URL:http://www.openwall.com/lists/oss-security/2016/08/02/11  View
793554 93341 CVE-2016-6521 MLIST:[oss-security] 20160803 Grails Console is still vulnerable to CSRF CVE-2016-6521  View
793555 93341 CVE-2016-6521 URL:http://www.openwall.com/lists/oss-security/2016/08/03/9  View
793556 93341 CVE-2016-6521 CONFIRM:https://github.com/sheehan/grails-console/issues/54  View
793557 93341 CVE-2016-6521 CONFIRM:https://github.com/sheehan/grails-console/issues/55  View
793558 93341 CVE-2016-6521 BID:92267  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5366 JVNDB-2016-006139 QEMU の hw/net/net_tx_pkt.c の net_tx_pkt_do_sw_fragmentation 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU (別名 Quick Emulator) の hw/net/net_tx_pkt.c の net_tx_pkt_do_sw_fragmentation 関数には、サービス運用妨害 (無限ループおよび QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-6834 93341 2.1 4.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006139.html  View