How severe is CVE-2021-26719?

CVE-2021-26719 has a severity rating of 6.5 (medium).

Which software versions are affected by CVE-2021-26719?

Versions before 1.3.2 of Gradle gradle-enterprise-test-distribution-agent and test-distribution-gradle-plugin, and versions before 1.8.2 of gradle-enterprise-maven-extension are affected.

Where can I find more information about CVE-2021-26719?

More information about CVE-2021-26719 can be found at the following reference link: https://security.gradle.com/advisory/CVE-2021-26719

Vulnerability/
CVE-2021-26719

medium

6.5

CWE

9/2/2021

3/8/2024

CVE-2021-26719: Path Traversal

Q: What is CVE-2021-26719?

CVE-2021-26719 is a directory traversal vulnerability discovered in Gradle gradle-enterprise-test-distribution-agent, test-distribution-gradle-plugin, and gradle-enterprise-maven-extension.

Q: How can a malicious actor exploit CVE-2021-26719?

A malicious actor with certain credentials can perform a registration step to exploit the vulnerability.

First published: Tue Feb 09 2021(Updated: )

A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor (with certain credentials) can perform a registration step such that crafted TAR archives lead to extraction of files into arbitrary filesystem locations.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Gradle Enterprise Test Distribution Agent	<1.3.2
Gradle Maven	>=1.8<=1.8.1
Gradle Test Distribution	<1.3.2

Never miss a vulnerability like this again

Reference Links

https://security.gradle.com/advisory/CVE-2021-26719

Frequently Asked Questions

What is CVE-2021-26719?
CVE-2021-26719 is a directory traversal vulnerability discovered in Gradle gradle-enterprise-test-distribution-agent, test-distribution-gradle-plugin, and gradle-enterprise-maven-extension.
How severe is CVE-2021-26719?
CVE-2021-26719 has a severity rating of 6.5 (medium).
Which software versions are affected by CVE-2021-26719?
Versions before 1.3.2 of Gradle gradle-enterprise-test-distribution-agent and test-distribution-gradle-plugin, and versions before 1.8.2 of gradle-enterprise-maven-extension are affected.
How can a malicious actor exploit CVE-2021-26719?
A malicious actor with certain credentials can perform a registration step to exploit the vulnerability.
Where can I find more information about CVE-2021-26719?
More information about CVE-2021-26719 can be found at the following reference link: https://security.gradle.com/advisory/CVE-2021-26719

collector/nvd-index
agent/type
collector/mitre-cve
source/MITRE
agent/author
agent/last-modified-date
agent/references
agent/severity
agent/weakness
agent/softwarecombine
agent/event
agent/tags
agent/first-publish-date
agent/description
vendor/gradle
canonical/gradle enterprise test distribution agent
canonical/gradle maven
version/gradle maven/1.8
version/gradle maven/1.8.1
canonical/gradle test distribution

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.