Description
Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configuration details) via a crafted HTTP request with the X-Gradle-Enterprise-Ajax-Request header.
Unscored
CVE-2021-41584
EUVD-2021-28598GHSA-pwr9-qwxg-647h
Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configur…
Published Sep 24, 2021 · Updated Aug 4, 2024 · Assigned by mitre