High severity7.5NVD Advisory· Published Sep 18, 2020· Updated Jun 17, 2026

CVE-2020-15771

Description

An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gradle/Enterprise
cpe:2.3:a:gradle:enterprise:2018.2:*:*:*:*:*:*:*
Gradle/Enterprise Cache Node
cpe:2.3:a:gradle:enterprise_cache_node:4.1:*:*:*:*:*:*:*
Gradle/Gradle Enterprisedescription
Gradle/Gradle Enterprisellm-fuzzy
Range: 2018.2
Gradle/Enterprise Build Cache Nodellm-fuzzy
Range: 4.1

Patches

Vulnerability mechanics

References

github.com/gradle/gradle/security/advisoriesnvdThird Party Advisory
security.gradle.com/advisory/CVE-2020-15771nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000