CVE-2022-41574

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and send emails with arbitrary text content to the configured installation-administrator contact address, via HTTP access to an accidentally exposed internal endpoint. This is fixed in 2022.3.2.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Oct 7, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-415757.5A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to CVE-2022-415767.8The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programCVE-2022-415777.1The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this CVE-2022-415789.8The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation CVE-2022-415796.5There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof theCVE-2022-41587.5The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_Fields POST CVE-2022-415809.8The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousCVE-2022-415819.1The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousCVE-2022-415827.5The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.CVE-2022-415837.5The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability wilCVE-2022-415847.8The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.CVE-2022-415857.8The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.
CVE-2022-41574: High severity, CVSS 7.5 | Vulnix