GHSA-XPHJ-M9CC-8FMQ Deserialization of Untrusted Data in Groovy

When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized...

Apache Groovy Remote Code Execution Vulnerability

Apache Groovy is a JVM-based agile development language from the Apache Apache Software Foundation in the United States, which combines features from Python, Ruby and Smalltalk. A remote code execution vulnerability exists in Apache Groovy versions 1.7.0 through 2.4.3. An attacker could exploit...