CVE-2022-35912

CVE-2022-35912 is a critical data binding vulnerability in Grails versions before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1, particularly with certain Java 8 configurations. This flaw allows a remote attacker to achieve code execution by gaining access to the class loader. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While the vulnerability has a high FAUCET Risk Score of 84/100 and an EPSS score indicating potential exploitability, there is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.