Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:21 a.m.21 views

Insecure transport protocol in Gradle

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

5.9CVSS1AI score0.00349EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/05/13 1:21 a.m.28 views

GHSA-PPRQ-4488-WGQX Insecure transport protocol in Gradle

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

5.9CVSS5.9AI score0.00349EPSS
Exploits0References6
Prion
Prion
added 2019/04/10 12:29 a.m.16 views

Design/Logic Flaw

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

4.3CVSS5.6AI score0.00349EPSS
Exploits0References4Affected Software2
OSV
OSV
added 2019/04/10 12:29 a.m.0 views

UBUNTU-CVE-2019-11065

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

5.9CVSS6.8AI score0.00349EPSS
Exploits0References4
NVD
NVD
added 2019/04/10 12:29 a.m.14 views

CVE-2019-11065

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

5.9CVSS5.7AI score0.00349EPSS
Exploits0References4
Rows per page
Query Builder