{"api_version":"1","generated_at":"2026-07-23T08:29:20+00:00","cve":"CVE-2014-2858","urls":{"html":"https://cve.report/CVE-2014-2858","api":"https://cve.report/api/cve/CVE-2014-2858.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-2858","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-2858"},"summary":{"title":"CVE-2014-2858","description":"Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a \"configured block.\" NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types.","state":"PUBLISHED","assigner":"mitre","published_at":"2014-04-15 23:55:08","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html","name":"http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.securityfocus.com/archive/1/531281/100/0/threaded","name":"http://www.securityfocus.com/archive/1/531281/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gopivotal.com/security/cve-2014-0053","name":"http://www.gopivotal.com/security/cve-2014-0053","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"CVE-2014-0053 Information Disclosure in Grails applications | Pivotal","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2858","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2858","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails","cpe6":"2.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2858","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gopivotal","cpe5":"grails-resources","cpe6":"1.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T10:28:46.371Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20140227 Update: CVE-2014-0053 Information Disclosure when using Grails","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/531281/100/0/threaded"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.gopivotal.com/security/cve-2014-0053"},{"name":"20140227 Update: CVE-2014-0053 Information Disclosure when using Grails","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-02-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a \"configured block.\" NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-09T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20140227 Update: CVE-2014-0053 Information Disclosure when using Grails","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/531281/100/0/threaded"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.gopivotal.com/security/cve-2014-0053"},{"name":"20140227 Update: CVE-2014-0053 Information Disclosure when using Grails","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-2858","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a \"configured block.\" NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20140227 Update: CVE-2014-0053 Information Disclosure when using Grails","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/531281/100/0/threaded"},{"name":"http://www.gopivotal.com/security/cve-2014-0053","refsource":"CONFIRM","url":"http://www.gopivotal.com/security/cve-2014-0053"},{"name":"20140227 Update: CVE-2014-0053 Information Disclosure when using Grails","refsource":"FULLDISC","url":"http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2014-2858","datePublished":"2014-04-15T18:00:00.000Z","dateReserved":"2014-04-15T00:00:00.000Z","dateUpdated":"2024-08-06T10:28:46.371Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-04-15 23:55:08","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BB4F4992-DAD4-43E4-A2D0-A00D585A2D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FEB18D96-BB77-4C80-9534-F78B95687CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3D8A6B18-29FE-4194-8EFC-5543E1A46BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4B1FC971-D192-43D1-BD86-19E99ADF5C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5A9BE413-E5A0-442F-B9B7-69F8EDD91FB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"48203D48-8A45-4648-981A-F28BE13282B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E280C52A-2F26-4D14-B1E0-8FA25181E856"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"04574C35-A00D-49CC-8C50-301C7FC643F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A11BBF2D-4489-4111-98A1-AA0B89A15DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"07D5A44B-5748-4AE4-9C8F-1718011961D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5BDE522-11D1-45AF-B60F-7F4022D85714"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9039FCCF-740D-4320-BA11-BF9BCD7809CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"979685AE-AFA1-47A0-BC5E-BC06EFCF02DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails-resources:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9DD08D54-5FA6-4E2D-8264-1FE8907D756A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E2B5FC64-83CC-49D3-BFDD-494763AB1FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EE1BBB9C-39B5-40CB-A12C-E33B7E35CB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6581AEB4-7049-4D84-9FB2-F5B58096BC60"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"23CF1A57-C941-4198-8F18-5618D8C07DD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"44DAA96C-1916-4100-8936-4353A3DC26A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"29342858-3173-45A5-91BF-81689593C960"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FAF7A322-5AE4-450C-B939-4D6B448766D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4ACEC5A6-FE19-423E-BF40-B5574C648A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"38C46B0E-3D30-4D22-9DF4-161FA5DE773D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"828398A1-EF0C-4193-8D85-A91475162BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5AEC8808-6358-4D4F-8984-8D2A341D67E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7391B773-22CC-43D1-9848-F1DA14537049"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"446CEA94-E3B0-45A8-B491-EF7F1EA4D74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1F330DB8-2576-44F1-A10C-7E3985FDFF9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B6BF47B6-6338-4A4B-B7B2-BB83F5D2431A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"63AF2815-41F3-499D-9BFC-086C623D285C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D085E87C-4447-465E-9E35-F1BDE7E5C78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A8DF5075-D458-4C50-99B7-CFFEEFFECBE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B3C2CACE-22AD-4BA1-BEF7-6C9BE89E2851"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BA1D4E9B-A698-4908-BFD8-E50F5F7989A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"14D06FBE-3BAB-4628-B702-F34FBDC5C36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5AC40D1E-2A40-4477-AC8D-712437CDD034"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"9148299E-E783-4508-BC5C-6A269A1944C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gopivotal:grails:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"6F4E1C85-2EE7-405B-B3EF-54B0B37E8624"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"2858","Ordinal":"1","Title":"CVE-2014-2858","CVE":"CVE-2014-2858","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"2858","Ordinal":"1","NoteData":"Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a \"configured block.\" NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types.","Type":"Description","Title":"CVE-2014-2858"},{"CveYear":"2014","CveId":"2858","Ordinal":"2","NoteData":"2014-04-15","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"2858","Ordinal":"3","NoteData":"2018-10-09","Type":"Other","Title":"Modified"}]}}}