CVE-2015-3253

Name of the Vulnerable Software and Affected Versions Apache Groovy versions 1.7.0 through 2.4.3

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object. This is related to the deserialization of untrusted data in Apache Groovy.

Recommendations For Apache Groovy versions 1.7.0 through 2.4.3, consider avoiding the deserialization of untrusted data as a temporary workaround until a patch is available. Restrict access to the MethodClosure class to minimize the risk of exploitation.