CVE-2021-41584

7.5

HIGHCVSS v3

Published

September 24, 2021

CVSS v2

5 MEDIUM

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configuration details) via a crafted HTTP request with the X-Gradle-Enterprise-Ajax-Request header.

gradle

NPMgradle

>= 2020.4, < 2021.1.3NVD

gradle/gradle

GitHubAdaptable, fast automation for all

>= 2020.4, < 2021.1.3NVD

Gradle

Chocolatey

More on this CVE

NVD↗GitHub Advisory↗

From mobile apps to microservices, from small startups to big enterprises, Gradle helps teams build, automate and deliver better software, faster.

>= 2020.4, < 2021.1.3NVD

Security Advisories

CVE-2021-41584

Description

More on this CVE