CVE-2021-41619

An issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code execution via the application startup configuration. The installation configuration user interface (available to administrators) allows specifying arbitrary Java Virtual Machine startup options. Some of these options, such as -XX:OnOutOfMemoryError, allow specifying a command to be run on the host. This can be abused to run arbitrary commands on the host, should an attacker gain administrative access to the application.

• CWE-94

• https://security.gradle.comVendor Advisory
• https://security.gradle.com/advisory/2021-08Vendor Advisory
• https://security.gradle.comVendor Advisory
• https://security.gradle.com/advisory/2021-08Vendor Advisory

Published

Oct 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41612An issue was discovered in the ALU unit of the OpenRISC mor1…8.8
• CVE-2021-41613An issue was discovered in the controller unit of the OpenRI…4.3
• CVE-2021-41614An issue was discovered in the controller unit of the OpenRI…7.8
• CVE-2021-41615websda.c in GoAhead WebServer 2.1.8 has insufficient nonce e…9.8
• CVE-2021-41616Apache DB DdlUtils 1.0 included a BinaryObjectsHelper that w…9.8
• CVE-2021-41617sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non…7
• CVE-2021-4162archivy is vulnerable to Cross-Site Request Forgery (CSRF)4.3
• CVE-2021-41634A user enumeration vulnerability in MELAG FTP Server 2.2.0.4…5.3
• CVE-2021-41635When installed as Windows service MELAG FTP Server 2.2.0.4 i…8.8
• CVE-2021-41636MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD c…6.5
• CVE-2021-41637Weak access control permissions in MELAG FTP Server 2.2.0.4 …7.1
• CVE-2021-41638The authentication checks of the MELAG FTP Server in version…7.5