CVE-2020-15776

Gradle Enterprise versions 2018.2 through 2020.2.4 are affected by a CSRF vulnerability. The CSRF prevention token is stored in a request cookie that is not annotated as HttpOnly, allowing a user’s browser to be manipulated by an attacker with potential JavaScript access to set an arbitrary token...