← Database

CVE-2021-41588

HIGH CVSS: 8.1 Published: 2021-09-24 Modified: 2026-06-17

Description

In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have the encryption and signing keys.

Affected Platforms

Gradle Gradle

Weakness Type

CWE-502

References