Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HGradle
APPGradle< 1.3.1
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCE
CWE
Powiązane podatności
CVE-2019-15052CRITICAL9.8ten sam produkt
The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured h...
CVE-2016-6199CRITICAL9.8ten sam produkt
ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serial...
CVE-2026-22865HIGH8.6ten sam produkt
Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When r...
CVE-2026-22816HIGH8.6ten sam produkt
Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When r...
CVE-2022-23630HIGH7.5ten sam produkt
Gradle is a build tool with a focus on build automation and support for multi-language development. In some ca...