Impact A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable.
Patches Patches are available for Grails 3 and later.
Workarounds No workaround is possible except to avoid data binding to request data.
References
- Blog post - Discussion - Mitre CVD record