high8.1
CVE-2021-41588
In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects.
Impact
In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have the encryption and signing keys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gradle | Gradle | from 2017.2 before 2021.1.3 |