CVE-2021-41588

In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have the encry...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have the encryption and signing keys.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami gradle

[{"type":"SEMVER","events":[{"introduced":"2017.2.0"},{"fixed":"2021.1.3"}]}]

Références

advisory security.gradle.com
web nvd.nist.gov