Security Advisory

CVE-2021-41588

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-24 14:18:31
Last updated 2024-08-04 03:15:28
Assigner mitre
State PUBLISHED

Description

In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary unsafe Java objects. The attacker must have the encryption and signing keys.