CVE Catalog
CVE-2015-3253
CriticalSummary
The MethodClosure class in Apache Groovy versions 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.
Risk Assessment
Exploitation of this vulnerability could lead to serious security breaches, including unauthorized access to systems and destabilization.
Recommendation
It is recommended to update Apache Groovy to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.