CVE-2021-41587
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover credentials for other resources.
Original description
The description as published by the source.
In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially discover credentials for other resources.
Affected packages
Bitnami
gradle
[{"type":"SEMVER","events":[{"introduced":"2017.6.0"},{"fixed":"2021.1.3"}]}]
References
- advisory security.gradle.com
- web nvd.nist.gov