Gradle Enterprise vulnerabilities

• gradle enterprise Develocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has network access... CVE-2025-24858 8.3 HighJanuary 26, 2025
• gradle enterprise Develocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control. Project... CVE-2024-46881 7.1 HighJanuary 26, 2025
• gradle enterprise In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new... CVE-2023-49238 9.8 CriticalJanuary 9, 2024
• gradle enterprise A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3... CVE-2022-41575 7.5 HighOctober 21, 2022
• gradle enterprise An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote... CVE-2022-41574 7.5 HighOctober 7, 2022
• gradle enterprise Gradle Enterprise through 2022.2.2 has Incorrect Access Control that leads to information... CVE-2022-30587 7.5 HighJune 6, 2022
• gradle enterprise Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not... CVE-2022-27919 9.8 CriticalMarch 25, 2022
• gradle enterprise In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed... CVE-2022-25364 8.1 HighMarch 17, 2022
• gradle enterprise Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It... CVE-2022-27225 6.5 MediumMarch 16, 2022
• gradle build cache node, enterprise +1 more In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is... CVE-2021-41589 9.8 CriticalOctober 27, 2021
• gradle enterprise An issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code... CVE-2021-41619 7.2 HighOctober 27, 2021
• gradle enterprise In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via... CVE-2021-41590 5.3 MediumOctober 27, 2021
• gradle maven, enterprise test distribution agent, test distribution +2 more A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent... CVE-2021-26719 6.5 MediumFebruary 9, 2021
• gradle enterprise An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross... CVE-2020-15773 6.5 MediumSeptember 18, 2020
• gradle enterprise An issue was discovered in Gradle Enterprise before 2020.2.5. Lack of the secure attribute on the... CVE-2020-15767 5.3 MediumSeptember 18, 2020
• gradle enterprise An issue was discovered in Gradle Enterprise 2018.5. There is a lack of lock-out after excessive... CVE-2020-15770 5.5 MediumSeptember 18, 2020
• gradle enterprise, enterprise cache node +1 more An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1.... CVE-2020-15771 7.5 HighSeptember 18, 2020
• gradle enterprise An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. There is XXE with resultant SSRF... CVE-2020-15772 4.9 MediumSeptember 18, 2020
• gradle enterprise An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. Because of implicitly remembered... CVE-2020-15774 6.8 MediumSeptember 18, 2020
• gradle enterprise An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. Unrestricted access to a high... CVE-2020-15775 7.5 HighSeptember 18, 2020
• gradle enterprise An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. CSRF mitigation can be bypassed... CVE-2020-15776 8.8 HighSeptember 18, 2020
• gradle enterprise, enterprise cache node +1 more An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache... CVE-2020-15768 7.5 HighSeptember 18, 2020
• gradle enterprise An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the... CVE-2020-15769 6.1 MediumSeptember 18, 2020
• gradle build cache node, enterprise +1 more In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password... CVE-2019-11403 9.8 CriticalApril 21, 2019
• gradle enterprise In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in... CVE-2019-11402 9.8 CriticalApril 21, 2019