CVE-2023-30853

score

<0.1

cvss

7.6

epss

0.3%

published

2023-04-28

kev added

—

first seen

2026-10-21

GitHub Actions workflows using Gradle Build Action prior to version 2.4.2 with configuration cache enabled may store secrets in the cache, exposing them to untrusted workflows, letting attackers access sensitive data, exploit requires cache entries with key matching 'configuration-cache-*'.