CVE-2015-3253
groovy: remote execution of untrusted code in class MethodClosure
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.
CVSS 3.0 · 9.8 Critical
EPSS 41.0%
KEV · Not listed
Vendors
Products