← Database

CVE-2021-41584

HIGH CVSS: 7.5 Published: 2021-09-24 Modified: 2026-06-17

Description

Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configuration details) via a crafted HTTP request with the X-Gradle-Enterprise-Ajax-Request header.

Affected Platforms

Gradle Gradle

Weakness Type

NVD-CWE-Other

References