CVE-2016-6199
CriticalSummary
The ObjectSocketWrapper.java in Gradle 2.12 has a vulnerability that allows remote attackers to execute arbitrary code via a crafted serialized object.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious security risk to systems using this version of Gradle.
Recommendation
It is recommended to upgrade Gradle to the latest version to mitigate this vulnerability.
Other vulnerabilities in Gradle 2.12
See all- CVE-2023-35947Medium
Gradle has a path traversal vulnerability when unpacking Tar archives, which may lead to overwriting important files in locations where the Gradle process has write permissions. An attacker can exploit this flaw by controlling the source of an archive or modifying the build to interact with a malicious archive.
- CVE-2023-35946Medium
Gradle, a build automation tool, has a vulnerability that allows files to be written to unintended locations in the filesystem through specially crafted dependency coordinates. This could lead to poisoning the dependency cache or overwriting important files.
Original NVD description (English source)
ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.