CVE-2020-15772

概要

参考情報

• gradle/gradle security advisory · Third Party Advisory
• security.gradle.com/advisory/CVE-2020-15772 · Vendor Advisory

enterprise のその他の脆弱性

• CVE-2023-49238緊急 9.8In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) b…
• CVE-2022-41575高 7.5A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to …
• CVE-2022-41574高 7.5An access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote attackers to prevent backups from occurring, and …
• CVE-2022-27919緊急 9.8Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The …
• CVE-2022-25364高 8.1In Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed anonymous write access. If this was not manuall…