CVE-2014-0053

CVE-2014-0053 describes an information disclosure vulnerability in the Resources plugin (versions 1.0.0-1.2.5) for Pivotal Grails (versions 2.0.0-2.3.5). The default configuration allows remote attackers to access files within the WEB-INF directory via a direct request, potentially exposing sensitive information. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), this vulnerability is remotely exploitable with low attack complexity, leading to confidentiality compromise without requiring authentication. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.