CVE-2022-27919

9.8 criticalEPSS 1.8%

Critical (9.8) in gradle enterprise. EPSS 1.8% chance of exploitation in the next 30 days.

Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allows certain anonymous access to administration and an API.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2022-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gradle:enterprise

References

https://security.gradle.com/advisory/2022-05
https://security.gradle.com/advisory/2022-05

Check your stack JSON