Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx6j-wqj7-mrv3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The HTTP client in the Build tool in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.

The HTTP client in the Build tool in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.

EPSS

Процентиль: 47%
0.0024
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 6 лет назад

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.

CVSS3: 9.8
redhat
около 6 лет назад

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.

CVSS3: 9.8
nvd
около 6 лет назад

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.

CVSS3: 9.8
debian
около 6 лет назад

The HTTP client in Gradle before 5.6 sends authentication credentials ...

suse-cvrf
больше 1 года назад

Security update for gradle, gradle-bootstrap

EPSS

Процентиль: 47%
0.0024
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-522