QwikSec

Security Database

CVE

CWE

Training

CVE-2020-15776

Published: Sep 18, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie that is not annotated as HttpOnly. An attacker with the ability to execute arbitrary code in a user's browser could impose an arbitrary value for this token, allowing them to perform cross-site request forgery.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/gradle/gradle/security/advisories

x_refsource_MISC

https://security.gradle.com/advisory/CVE-2020-15776

x_refsource_CONFIRM

https://cwe.mitre.org/data/definitions/1004.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.