VYPR
Unrated severityNVD Advisory· Published Sep 18, 2020· Updated Aug 4, 2024

CVE-2020-15773

CVE-2020-15773

Description

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user (for the duration of the browser session) after previously explicitly authenticating with the API.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Gradle/Gradle Enterprisedescription
  • Gradle/Gradlellm-fuzzy
    Range: <2020.2.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.