CVE-2016-6199

Impact

ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726
• https://philwantsfish.github.io/security/java-deserialization-github
• https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726
• https://philwantsfish.github.io/security/java-deserialization-github