CVEブラウザに戻る

CVE-2020-15771

HIGH

7.5

CVSS Severity Score

EPSS Score0.1050%

EPSS Percentile34.47th

Published2020年9月18日

Last Modified2024年11月21日

Vulnerability Description

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation.

Affected Platforms (CPE)

📦

Gradle

Enterprise

= 2018.2

📦

Gradle

Enterprise Cache Node

= 4.1

References & Advisories

🔗 https://github.com/gradle/gradle/security/advisories

🔗 https://security.gradle.com/advisory/CVE-2020-15771

🔗 https://github.com/gradle/gradle/security/advisories

🔗 https://security.gradle.com/advisory/CVE-2020-15771

関連する脆弱性情報

CVE-2019-1121010.0

The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platfo...

CVE-2020-636410.0

SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to m...

CVE-2019-917410.0

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1....

CVE-1999-085310.0

Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTT...