CVE-2021-41586
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the system user password.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the system user password.
影響パッケージ
Bitnami
gradle
[{"type":"SEMVER","events":[{"introduced":"2020.4.0"},{"fixed":"2021.1.3"}]}]
参照URL
- advisory security.gradle.com
- web nvd.nist.gov