Beveiligingsadvies

CVE-2019-11065

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-04-09 23:37:04
Laatst bijgewerkt 2024-08-04 22:40:16
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site.