PT-2020-14616 · Gradle · Gradle Enterprise

Published 2020-09-18 · Updated 2020-09-21 · CVE-2020-15769

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Gradle Enterprise versions 2020.2 through 2020.2.4

Description An issue exists in the software where an XSS issue can be triggered via the request URL, potentially allowing attackers to execute malicious scripts.

Recommendations For Gradle Enterprise versions 2020.2 through 2020.2.4, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-15769

Affected Products

Gradle Enterprise

References · 4

• https://security.gradle.com/advisory/CVE-2020-15769 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15769 · Security Note
• https://github.com/gradle/gradle/security/advisories · Note