CVE-2021-41584: Gradle

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configuration details) via a crafted HTTP request with the X-Gradle-Enterprise-Ajax-Request header.

Affected products

• Gradle Gradle: from 2020.4, before 2021.1.3 (fixed in 2021.1.3)

Published 2021-09-24. Last modified 2026-06-17.