PT-2020-14620
CVE-2020-15773
·
تاريخ النشر
2020-09-18
·
تاريخ التحديث
2020-09-25
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Gradle Enterprise versions prior to 2020.2.4
Description
An issue allows an attacker to access data as a user after previously explicitly authenticating with the API, due to unrestricted cross-origin requests to read-only data in the Export API. This can occur for the duration of the browser session.
Recommendations
For versions prior to 2020.2.4, update to version 2020.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Export API to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾