En bref
- CVE-2019-11065 est une vulnérabilité MOYENNE (CVSS 5.9) touchant org.gradle:gradle-core, gradle (gradle).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.4%, plus élevée que 71.7% des vulnérabilités.
- Correctif : mettre à jour vers 5.4.0 ou plus récent.
Description
Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site.
NVD description
Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site.
Autres vulnérabilités de org.gradle:gradle-core
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free