CVE-2020-15771: CSRF

Published Sep 18, 2020

Updated

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation.

Affected Software

2 affected components

Gradle Enterprise=2018.2

Gradle Enterprise Cache Node=4.1

Event History

Sep 18, 2020

CVE Published

via MITRE·01:22 PM

Data Sourced

via MITRE·01:22 PM

Description

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2020-15771.

What is the severity of CVE-2020-15771?

The severity of CVE-2020-15771 is high (7.5).

What is the affected software for CVE-2020-15771?

The affected software for CVE-2020-15771 includes Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1.

How does CVE-2020-15771 work?

CVE-2020-15771 allows remote attackers to bypass CSRF mitigation by performing a cross-site transmission of a cookie containing a CSRF token.

Where can I find more information about CVE-2020-15771?

You can find more information about CVE-2020-15771 at the following references: [GitHub Advisory](https://github.com/gradle/gradle/security/advisories) and [Security Advisory](https://security.gradle.com/advisory/CVE-2020-15771).