Vulnerabilities > Gradle > Build Cache Node

DATE CVE VULNERABILITY TITLE RISK
2021-10-27 CVE-2021-41589 Incorrect Permission Assignment for Critical Resource vulnerability in Gradle Build Cache Node and Enterprise
In Gradle Enterprise before 2021.3 (and Enterprise Build Cache Node before 10.0), there is potential cache poisoning and remote code execution when running the build cache node with its default configuration.
network
low complexity
gradle CWE-732
7.5
2019-04-22 CVE-2019-11403 Information Exposure vulnerability in Gradle Build Cache Node and Enterprise
In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page.
network
low complexity
gradle CWE-200
critical
9.8