CVE-2023-46131

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3, 5.3.4, 6.1.0.

• CWE-400

• https://github.com/grails/grails-core/commit/74326bdd2cf7dcb594092165e9464520f8366c60Patch
• https://github.com/grails/grails-core/commit/c401faaa6c24c021c758b95f72304a0e855a8db3Patch
• https://github.com/grails/grails-core/issues/13302Issue Tracking
• https://github.com/grails/grails-core/security/advisories/GHSA-3pjv-r7w4-2cf5Vendor Advisory
• https://grails.org/blog/2023-12-20-cve-data-binding-dos.htmlVendor Advisory
• https://github.com/grails/grails-core/commit/74326bdd2cf7dcb594092165e9464520f8366c60Patch
• https://github.com/grails/grails-core/commit/c401faaa6c24c021c758b95f72304a0e855a8db3Patch
• https://github.com/grails/grails-core/issues/13302Issue Tracking
• https://github.com/grails/grails-core/security/advisories/GHSA-3pjv-r7w4-2cf5Vendor Advisory
• https://grails.org/blog/2023-12-20-cve-data-binding-dos.htmlVendor Advisory

Published

Dec 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46126Fides is an open-source privacy engineering platform for man…5.4
• CVE-2023-46127Frappe is a full-stack web application framework that uses P…5.4
• CVE-2023-46128Nautobot is a Network Automation Platform built as a web app…6.5
• CVE-2023-46129NATS.io is a high performance open source pub-sub distribute…7.5
• CVE-2023-4613This vulnerability allows remote attackers to execute arbitr…9.8
• CVE-2023-46130Discourse is an open source platform for community discussio…5.4
• CVE-2023-46132Hyperledger Fabric is an open source permissioned distribute…6.5
• CVE-2023-46133CryptoES is a cryptography algorithms library compatible wit…9.1
• CVE-2023-46134D-Tale is the combination of a Flask back-end and a React fr…9.8
• CVE-2023-46135rs-stellar-strkey is a Rust lib for encode/decode of Stellar…7.5
• CVE-2023-46136Werkzeug is a comprehensive WSGI web application library. In…7.5
• CVE-2023-46137Twisted is an event-based framework for internet application…5.3