Cross site scripting

2020-09-1815:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user (for the duration of the browser session) after previously explicitly authenticating with the API.

CPENameOperatorVersion
enterpriselt2020.2.4

CPE	Name	Operator	Version
	enterprise	lt	2020.2.4

References

github.com/gradle/gradle/security/advisories

security.gradle.com/advisory/CVE-2020-15773