CVE-2020-15776

An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4

published September 18, 2020

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie that is not annotated as HttpOnly. An attacker with the ability to execute arbitrary code in a user's browser could impose an arbitrary value for this token, allowing them to perform cross-site request forgery.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02048 · 81.1th percentile
Published
2020-09-18T13:16Z
EPSS history
Timeline
  • 18 SEP 13:16Z
    An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4
    cvelistv5