Puneet Behl

Grails® framework RCE via Data Binding - CVE-2022-35912

24

### Issue description I am opening this issue to facilitate the discussion about this. More information available at https://grails.org/blog/2022-07-18-rce-vulnerability.html

grails/gorm-mongodb#77 Updated MultiTenantEventListener

1

Updated MultiTenantEventListener to not add the multi-tenant filter to the query in case of shared database and when `tenantId` is DEFAULT

#77 Updated MongoStaticApi

2

Updated MongoStaticApi to not add the multi-tenant filter to the query in case of shared database and when `tenantId` is DEFAULT

### Task List - [x] Steps to reproduce provided - [x] Stacktrace (if present) provided - [x] Example that reproduces the problem uploaded to Github - [x] Full description of...

Slow application startup time due to increased datasource configuration time

2

When using the old version 7.3.0, the application starts up in ~4 minutes. But when using the newer version that the Grails cli defaults to for a Grails 4.1.1 application...

We are facing an error `No matching variant of org.apache.groovy:groovy-bom:4.0.4 was found` because `org.codehaus.groovy:groovy-bom:3.0.10` is fetched transitively for the `annotationProcessor` scope. ### Expected Behavior We should be able to exclude...