CVE-2021-41588

8.1

HIGHCVSS v3

Published

September 24, 2021

CVSS v2

6.8 MEDIUM

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have the encryption and signing keys.

gradle

NPMgradle

>= 2017.2, < 2021.1.3NVD

gradle/gradle

GitHubAdaptable, fast automation for all

>= 2017.2, < 2021.1.3NVD

Gradle

Chocolatey

More on this CVE

NVD↗GitHub Advisory↗

From mobile apps to microservices, from small startups to big enterprises, Gradle helps teams build, automate and deliver better software, faster.

>= 2017.2, < 2021.1.3NVD

Security Advisories

CVE-2021-41588

Description

More on this CVE