Vulnerability Intelligence Report
CVE-2021-26719
A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor (with certain credentials) can perform a registration step such that crafted TAR archives lead to extraction of files into arbitrary filesystem locations.
No Active Exploit Signals
CVSS Base Score
6.5
MEDIUM
EPSS Probability:1.35%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| gradle | enterprise_test_distribution_agent | all |
| gradle | maven | all |
| gradle | test_distribution | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.355%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2021-02-05T00:00:00 |
| Published | 2021-02-09T13:43:49 |
| Last Updated | 2024-08-03T20:33:40 |
Community Chatter & Buzz