https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-2858.htmlhttps://patchthecve.com/cve/CVE-2014-2858.htmlWed, 17 Jun 2026 00:07:16 +0000MEDIUM 5.0: Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a "configured block." NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to differenthttps://patchthecve.com/cve/CVE-2014-2857.htmlhttps://patchthecve.com/cve/CVE-2014-2857.htmlWed, 17 Jun 2026 00:07:16 +0000MEDIUM 5.0: The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 does not properly restrict access to files in the META-INF directory, which allows remote attackers to obtain sensitive information via a direct request. NOTE: this issue was SPLIT from CVE-2https://patchthecve.com/cve/CVE-2014-0053.htmlhttps://patchthecve.com/cve/CVE-2014-0053.htmlWed, 17 Jun 2026 00:02:10 +0000MEDIUM 5.0: The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, which allows remote attackers to obtain sensitive information via a direct request. NOTE: this identifier has been SPLIT du