CVE-2020-15772

An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4

published September 18, 2020

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a SAML identity provider, an XML metadata file can be uploaded by an administrator. The server side processing of this file dereferences XML External Entities (XXE), allowing a remote attacker with administrative access to perform server side request forgery.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01248 · 69.1th percentile
Published
2020-09-18T13:21Z
EPSS history
Timeline
  • 18 SEP 13:21Z
    An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4
    cvelistv5