CVE-2021-41586: Gradle

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In Gradle Enterprise before 2021.1.3, an attacker with the ability to perform SSRF attacks can potentially reset the system user password.

Affected products

• Gradle Gradle: from 2020.4, before 2021.1.3 (fixed in 2021.1.3)

Published 2021-09-24. Last modified 2026-06-17.