Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7h49-6h73-grw2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. Unrestricted access to a high-level system-usage summary allows an attacker to obtain project names and usage metrics.

An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. Unrestricted access to a high-level system-usage summary allows an attacker to obtain project names and usage metrics.

EPSS

Процентиль: 55%
0.00322
Низкий

7.5 High

CVSS3

Дефекты

CWE-922

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level build information such as project names and build counts over time. This page is incorrectly viewable anonymously.

EPSS

Процентиль: 55%
0.00322
Низкий

7.5 High

CVSS3

Дефекты

CWE-922