Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-06	CVE-2023-42445	Unspecified vulnerability in Gradle Gradle is a build tool with a focus on build automation and support for multi-language development. network high complexity gradle	5.3
2023-10-05	CVE-2023-44387	Unspecified vulnerability in Gradle Gradle is a build tool with a focus on build automation and support for multi-language development. local low complexity gradle	6.5
2023-06-30	CVE-2023-35946	Unspecified vulnerability in Gradle Gradle is a build tool with a focus on build automation and support for multi-language development. local low complexity gradle	5.5
2023-04-28	CVE-2023-30853	Cleartext Storage of Sensitive Information vulnerability in Gradle Build Action Gradle Build Action allows users to execute a Gradle Build in their GitHub Actions workflow. network low complexity gradle CWE-312	6.5
2022-07-14	CVE-2022-31156	Improper Verification of Cryptographic Signature vulnerability in Gradle Gradle is a build tool. network high complexity gradle CWE-347	4.4
2022-03-16	CVE-2022-27225	Missing Encryption of Sensitive Data vulnerability in Gradle Enterprise Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. network low complexity gradle CWE-311	6.5
2021-10-27	CVE-2021-41590	Unspecified vulnerability in Gradle Enterprise 2020.4 In Gradle Enterprise through 2021.3, probing of the server-side network environment can occur via an SMTP configuration test. network low complexity gradle	5.3
2021-04-12	CVE-2021-29429	In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. local low complexity gradle quarkus	5.5
2021-02-09	CVE-2021-26719	Path Traversal vulnerability in Gradle products A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. network low complexity gradle CWE-22	6.5
2020-09-18	CVE-2020-15773	Origin Validation Error vulnerability in Gradle Enterprise An issue was discovered in Gradle Enterprise before 2020.2.4. network low complexity gradle CWE-346	6.5