CVE-2022-41575: Gradle Enterprise

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to access a subset of application data (e.g., cleartext credentials). This is fixed in 2022.3.3.

Affected products

• Gradle Enterprise: from 2022.3, before 2022.3.3 (fixed in 2022.3.3)

Published 2022-10-21. Last modified 2026-06-17.