| Package | Affected versions | Patched versions |
|---|---|---|
| gradle | ≥ 2020.4, < 2021.1.3 | 2021.1.3 |
Gradle Enterprise before 2021.1.3 can allow unauthorized viewing of a response (information disclosure of possibly sensitive build/configuration details) via a crafted HTTP request with the X-Gradle-Enterprise-Ajax-Request header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free