Gradle up to 7.1 on Unix application/gradlew os command injection

A vulnerability was found in Gradle up to 7.1 on Unix. It has been declared as critical. Affected by this vulnerability is an unknown function of the component application/gradlew. Upgrading to version 7.2 eliminates this vulnerability.

Description [CVE–2021–32751]

A vulnerability was found in Gradle up to 7.1 on Unix. It has been declared as critical. Affected by this vulnerability is an unknown function of the component application/gradlew. The manipulation with an unknown input leads to a privilege escalation vulnerability. The CWE definition for the vulnerability is CWE-78.

As an impact it is known to affect confidentiality, integrity, and availability.

Base Score: 7.5 [HIGH]
Vector:  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Class: Privilege escalation
Remote: Yes
Products: gradle

Mitigation:

Upgrade to 7.2 version.