CVE-2021-41587
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover credentials for other resources.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover credentials for other resources.
影響パッケージ
Bitnami
gradle
[{"type":"SEMVER","events":[{"introduced":"2017.6.0"},{"fixed":"2021.1.3"}]}]
参照URL
- advisory security.gradle.com
- web nvd.nist.gov