gradle

Records53All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

gradle records in CISA KEV

No gradle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gradle 23 records MEDIUM Enterprise 21 records MEDIUM Build Cache Node 2 records MEDIUM Enterprise Cache Node 2 records LOW Maven 2 records LOW Build Action 1 record LOW Enterprise Test Distribution Agent 1 record LOW Gradle-completion 1 record LOW

Records

1 record in Build Action · all components

TI-2023-14632 CVE-2023-30853 · GHSA-h3qr-39j9-4r5v

Gradle Build Action data written to GitHub Actions Cache may expose secrets

LOW 33

Gradle Build Action allows users to execute a Gradle Build in their GitHub Actions workflow.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00285 Published 2023-04-28 Fixed in 2.4.2 CWE-200

Open these records in search →