1 matches found
gradle: Possible local text file exfiltration by XML External entity injection
A flaw was found in Gradle. In some cases, when Gradle parses XML files, resolving XML external entities is not disabled. Combined with an Out Of Band XXE attack OOB-XXE, parsing XML can lead to the exfiltration of local text files to a remote server. In most cases, Gradle parses XML files it...
6.8CVSS5.7AI score0.00674EPSS
SaveExploits0References5
20