A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 up to and including 2022.3.3 allows remote malicious users to access a subset of application data (e.g., cleartext credentials). This is fixed in 2022.3.3.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gradle enterprise |