Design/Logic Flaw

2020-09-1814:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation.

CPENameOperatorVersion
enterpriseeq2018.2
enterprise_cache_nodeeq4.1

CPE	Name	Operator	Version
	enterprise	eq	2018.2
	enterprise_cache_node	eq	4.1

References

github.com/gradle/gradle/security/advisories

security.gradle.com/advisory/CVE-2020-15771