CVE-2020-15777

CVE-2020-15777 is a critical deserialization vulnerability affecting the Maven Extension plugin before version 1.6 for Gradle Enterprise. The extension's use of unrestricted deserialization of Java objects over an unbounded socket connection allows for remote code execution (RCE) and local privilege escalation (LPE) through malicious gadget chains. With a CVSS score of 7.8 (High), exploitation requires local access and low privileges, but no user interaction. Despite its high severity, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.