6 matches found
Exposure of Sensitive Information in Gradle publish plugin
All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is public...
cn.bestwu.groovy-publish:cn.bestwu.groovy-publish.gradle.plugin (>=0.0.18, <=0.0.31), cn.bestwu.kotlin-publish:cn.bestwu.kotlin-publish.gradle.plugin (>=0.0.18, <=0.0.31) +84 more potentially affected by CVE-2020-7599 via com.gradle.publish:plugin-publish-plugin (>=0.9.0, <=0.10.1)
com.gradle.publish:plugin-publish-plugin MAVEN version =0.9.0, =0.0.18, =0.0.18, =0.0.1, =0.0.1, =1.0.1, =0.9.0, =5.14.0, =0.3.0, =1.0.2, =1.0.1, =0.0.18, =0.3.0, =0.4.6 and more Source cves: CVE-2020-759...
CVE-2020-7599
All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is public...
cn.bestwu.groovy-publish:cn.bestwu.groovy-publish.gradle.plugin (>=0.0.18, <=0.0.31), cn.bestwu.kotlin-publish:cn.bestwu.kotlin-publish.gradle.plugin (>=0.0.18, <=0.0.31) +84 more potentially affected by CVE-2020-7599 via com.gradle.publish:plugin-publish-plugin (>=0.9.0, <=0.10.1)
com.gradle.publish:plugin-publish-plugin MAVEN version =0.9.0, =0.0.18, =0.0.18, =0.0.1, =0.0.1, =1.0.1, =0.9.0, =5.14.0, =0.3.0, =1.0.2, =1.0.1, =0.0.18, =0.3.0, =0.4.6 and more Source cves: CVE-2020-759...
CVE-2020-7599
All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is public...
Insertion of Sensitive Information into Log File
Overview com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin is a plugin that publishes plugins to the Gradle Plugin Portal. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while...