Asset Pipeline Project Asset-Pipeline
2 CVEs affecting Asset Pipeline Project Asset-Pipeline. Latest disclosed: 2018-12-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000817 | High | 7.5 | 2018-12-20 | Asset Pipeline Grails Plugin Asset-pipeline plugin version Prior to 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerability in Application… |
CVE-2018-17605 | High | 7.5 | 2018-09-28 | An issue was discovered in the Asset Pipeline plugin before 3.0.4 for Grails. An attacker can perform directory traversal via a crafted request when a servlet-… |