CVE-2023-35946Published
Dependency cache path traversal in Gradle
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2023-35946 · Microsoft / collected KEV context
cve-program · CVE-2023-35946
- https://github.com/gradle/gradle/security/advisories/GHSA-2h6c-rv6q-494v
- https://github.com/gradle/gradle/commit/859eae2b2acf751ae7db3c9ffefe275aa5da0d5d
- https://github.com/gradle/gradle/commit/b07e528feb3a5ffa66bdcc358549edd73e4c8a12
- https://docs.gradle.org/current/userguide/dependency_verification.html
- https://security.netapp.com/advisory/ntap-20230731-0003/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.