Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configuration details) via a crafted HTTP request with the X-Gradle-Enterprise-Ajax-Request header.
References
Link | Resource |
---|---|
https://security.gradle.com/advisory/2021-02 | Vendor Advisory |
Configurations
Information
Published : 2021-09-23 20:15
Updated : 2021-09-29 14:13
NVD link : CVE-2021-41584
Mitre link : CVE-2021-41584
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
gradle
- gradle