CVE-2020-15777
1 advisory.
Maven/com.gradle:gradle-enterprise-maven-extension CVE-2020-15777: high 7.8
Maven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted Data
Action: Upgrade com.gradle:gradle-enterprise-maven-extension to 1.6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6 | - |
Fixed versions
| 1.6 |
Sources
- osv: GHSA-vp55-fhxx-vcx8
- https://nvd.nist.gov/vuln/detail/CVE-2020-15777
- https://docs.gradle.com/enterprise/maven-extension/#1_6
- https://docs.gradle.com/enterprise/maven-extension/#release_history
- https://security.gradle.com/advisory/CVE-2020-15777
CVE-2020-15777 · published · modified · JSON