Description
In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have the encryption and signing keys.
Unscored
CVE-2021-41588
EUVD-2021-28602GHSA-2j29-824j-4f3v
In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must hav…
Published Sep 24, 2021 · Updated Aug 4, 2024 · Assigned by mitre