CVE-2020-15773

An issue was discovered in Gradle Enterprise before 2020.2.4

published September 18, 2020

CVSS
—
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user (for the duration of the browser session) after previously explicitly authenticating with the API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.5th percentile
Published
2020-09-18T14:04Z
EPSS history
Timeline
  • 18 SEP 14:04Z
    An issue was discovered in Gradle Enterprise before 2020.2.4
    cvelistv5