CVE-2020-15771

CVE-2020-15771 affects Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. The vulnerability is a cross-site transmission of a cookie containing a CSRF token, allowing a remote attacker to bypass CSRF mitigation. The connected documents confirm the affected products and the CSRF ...

CVE-2020-15768

Gradle Enterprise (versions 2017.3–2020.2.4) and Gradle Enterprise Build Cache Node (versions 1.0–9.2) are affected by an unrestricted HTTP header reflection vulnerability that can allow remote attackers to obtain authentication cookies and impersonate a user if a separate XSS issue exists. Affec...