cve/CVE-2016-6199.md at 694ac234a19db48cd3b1f78eb5f461ab1f6c99f7 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

638 B

Raw Blame History

CVE-2016-6199

Description

ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.

POC

Reference

https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726

Github

https://github.com/PalindromeLabs/Java-Deserialization-CVEs