CVE-2022-31156

🗓️ 14 Jul 2022 20:05:11Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 101 Views

Gradle Build Tool versions 6.2-7.4.2 allow unverified external dependencies, posing security risks

Reporter	Title	Published	Views	Family All 151
AlpineLinux	CVE-2022-31156	14 Jul 202220:15	–	alpinelinux
CNNVD	Gradle 数据伪造问题漏洞	14 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-31156 Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed	14 Jul 202220:05	–	cvelist
Debian CVE	CVE-2022-31156	14 Jul 202220:05	–	debiancve
EUVD	EUVD-2022-52772	3 Oct 202520:07	–	euvd
NVD	CVE-2022-31156	14 Jul 202220:15	–	nvd
OSV	BIT-GRADLE-2022-31156 Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed	6 Mar 202410:53	–	osv
OSV	CGA-246C-99CQ-9965	7 Sep 202614:34	–	osv
OSV	CGA-2HXQ-M4PX-6QXQ	4 Sep 202616:33	–	osv
OSV	CGA-2J7Q-4WXP-R5CQ	4 Sep 202614:56	–	osv

NVD

Vulners

Node

gradle gradleRange6.2.0–7.5.0

[
  {
    "product": "gradle",
    "vendor": "gradle",
    "versions": [
      {
        "status": "affected",
        "version": ">= 6.2, <= 7.4.2"
      }
    ]
  }
]