Back to search
CVE-2019-11065
Published: Apr 9, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://github.com/gradle/gradle/pull/8927
x_refsource_MISC
FEDORA-2019-902786bc1e
vendor-advisory
x_refsource_FEDORA
FEDORA-2019-a9c15101fb
vendor-advisory
x_refsource_FEDORA
FEDORA-2019-1b6383acdd
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now