gradle vulnerabilities (Bitnami)
20 vulnerabilities.
-
gradleBitnami Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts 8.6 High -
gradleBitnami Gradle fails to disable repositories which can expose builds to malicious artifacts 8.6 High -
gradleBitnami Gradle vulnerable to local privilege escalation through system temporary directory 8.8 High -
gradleBitnami Possible local file exfiltration by XML External entity injection 6.8 Medium -
gradleBitnami Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations 3.2 Low -
gradleBitnami Dependency cache path traversal in Gradle 6.9 Medium -
gradleBitnami Path traversal vulnerabilities in handling of Tar archives in Gradle 6.9 Medium -
gradleBitnami Gradle usage of long IDs for PGP keys opens potential for collision attacks 6.6 Medium -
gradleBitnami Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed 6.6 Medium -
gradleBitnami Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to code execution. 7.2 High -
gradleBitnami Dependency verification bypass in Gradle 7.5 High -
gradleBitnami In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can... 7.5 High -
gradleBitnami In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can... 7.5 High -
gradleBitnami In Gradle Enterprise before 2021.1.3, a crafted request can trigger deserialization of arbitrary... 8.1 High -
gradleBitnami Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information... 7.5 High -
gradleBitnami Arbitrary code execution via specially crafted environment variables 7.5 High -
gradleBitnami Repository content filters do not work in Settings pluginManagement 8.0 High -
gradleBitnami Local privilege escalation through system temporary directory 8.8 High -
gradleBitnami Information disclosure through temporary directory permissions 4.0 Medium -
gradleBitnami Code injection in Apache Ant 7.5 High