CVE-2021-32751: Improper Neutralization of Special Elements used in an OS Command

Gradle is a build tool with a focus on build automation. In versions prior to 7.2, start scripts generated by the application plugin and the gradlew script are both vulnerable to arbitrary code execution when an attacker is able to change environment variables for the user running the script. Thi...

Gradle operating system command injection vulnerability

Gradle is a JVM-based project builder from Gradle, which supports maven, Ivy repositories, etc. Gradle has a security vulnerability in versions prior to 7.2 that could be exploited to change the environment variables of the user running the script and execute arbitrary code...

PT-2021-6458

Name of the Vulnerable Software and Affected Versions Gradle versions prior to 7.2 Description The issue concerns arbitrary code execution when an attacker can change environment variables for the user running the script. This affects those using gradlew on Unix-like systems or scripts generated ...

org.openapitools:openapi-generator-gradle-plugin (3.0.1), org.openapitools:openapi-generator-gradle-plugin-mvn-wrapper (3.0.1) +2 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.0.1)

org.openapitools:openapi-generator MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.3), org.openapitools:openapi-generator-maven-plugin (3.0.3) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.0.3)

org.openapitools:openapi-generator MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.0), org.openapitools:openapi-generator-maven-plugin (3.1.0) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.1.0)

org.openapitools:openapi-generator MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.0), org.openapitools:openapi-generator-maven-plugin (3.2.0) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.0)

org.openapitools:openapi-generator MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.1), org.openapitools:openapi-generator-maven-plugin (3.2.1) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.1)

org.openapitools:openapi-generator MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.2), org.openapitools:openapi-generator-maven-plugin (3.2.2) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.2)

org.openapitools:openapi-generator MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.3), org.openapitools:openapi-generator-maven-plugin (3.2.3) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.3)

org.openapitools:openapi-generator MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.0), org.openapitools:openapi-generator-maven-plugin (3.3.0) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.0)

org.openapitools:openapi-generator MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.1), org.openapitools:openapi-generator-maven-plugin (3.3.1) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.1)

org.openapitools:openapi-generator MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.2), org.openapitools:openapi-generator-maven-plugin (3.3.2) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.2)

org.openapitools:openapi-generator MAVEN version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.3), org.openapitools:openapi-generator-maven-plugin (3.3.3) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.3)

org.openapitools:openapi-generator MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.3 -...

org.openapitools:openapi-generator-gradle-plugin (4.0.0-beta2), org.openapitools:openapi-generator-maven-plugin (4.0.0-beta2) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.0.0-beta2)

org.openapitools:openapi-generator MAVEN version 4.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 4.0.0-beta2 -...

de.unikassel.vs.apirepo.plugins.api:de.unikassel.vs.apirepo.plugins.api.gradle.plugin (>=0.0.1-stable, <=0.1.0-stable), de.unikassel.vs.apirepo.plugins.client:de.unikassel.vs.apirepo.plugins.client.gradle.plugin (>=0.0.1-stable, <=0.1.0-stable) +11 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.0.3)

org.openapitools:openapi-generator MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - de.unikassel.vs.apirepo.plugins.api:de.unikassel.vs.apirepo.plugins.api.gradle.plugin...

org.openapi.generator:org.openapi.generator.gradle.plugin (4.1.3), org.openapitools:openapi-generator-gradle-plugin (4.1.3) +2 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.1.3)

org.openapitools:openapi-generator MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapi.generator:org.openapi.generator.gradle.plugin 4.1.3 -...

CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

CVE-2021-29429

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...

CVE-2021-29427

In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/or dependency poisoning. Repository content filtering is a security control Gradle introduced to help users specify what repositories are used to resolve specific dependencies...