CVE-2021-41586
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the system user password.
Original description
The description as published by the source.
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the system user password.
Affected packages
Bitnami
gradle
[{"type":"SEMVER","events":[{"introduced":"2020.4.0"},{"fixed":"2021.1.3"}]}]
References
- advisory security.gradle.com
- web nvd.nist.gov