CVE-2018-17605

CVE-2018-17605 is a directory traversal vulnerability affecting the Asset Pipeline plugin for Grails, specifically versions prior to 3.0.4. Attackers can exploit a classloader vulnerability in AssetPipelineFilter.groovy or AssetPipelineFilterCore.groovy via a crafted request when the application runs on Jetty, potentially allowing unauthorized access to files. With a CVSS score of 7.5 (High), this vulnerability has a network attack vector and low attack complexity, leading to high confidentiality impact without requiring user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.