CVE-2020-15771

2020-09-1814:15:12

Google

osv.dev

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.1%

JSON

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation.

CPENameOperatorVersion
gradleeq2.2.1
gradleeqREL_1.1
gradleeqREL_1.8-rc-1
gradleeq2.12.0-RC1
gradleeqREL_1.0-milestone-4
gradleeqREL-0.8
gradleeq3.2.0
gradleeq0.9.0
gradleeq2.0.0-RC2
gradleeq1.0.0-RC1

Name	Operator	Version
gradle	eq	2.2.1
gradle	eq	REL_1.1
gradle	eq	REL_1.8-rc-1
gradle	eq	2.12.0-RC1
gradle	eq	REL_1.0-milestone-4
gradle	eq	REL-0.8
gradle	eq	3.2.0
gradle	eq	0.9.0
gradle	eq	2.0.0-RC2
gradle	eq	1.0.0-RC1