CVE-2020-15773

Name of the Vulnerable Software and Affected Versions Gradle Enterprise versions prior to 2020.2.4

Description An issue allows an attacker to access data as a user after previously explicitly authenticating with the API, due to unrestricted cross-origin requests to read-only data in the Export API. This can occur for the duration of the browser session.

Recommendations For versions prior to 2020.2.4, update to version 2020.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Export API to minimize the risk of exploitation.