PT-2022-25947
CVE-2022-41574
·
تاريخ النشر
2022-10-07
·
تاريخ التحديث
2022-10-11
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Gradle Enterprise versions 2022.3.1 through 2022.4
Description
An access-control issue allows remote attackers to prevent backups and send emails with arbitrary text content to the installation-administrator contact address via HTTP access to an exposed internal endpoint.
Recommendations
For Gradle Enterprise versions 2022.3.1 through 2022.4, update to version 2022.3.2 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾