CVE-2020-15772 | BDVDB-2026-141925 Detail

Description#

An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a SAML identity provider, an XML metadata file can be uploaded by an administrator. The server side processing of this file dereferences XML External Entities (XXE), allowing a remote attacker with administrative access to perform server side request forgery.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/gradle/gradle/security/advisories
https://security.gradle.com/advisory/CVE-2020-15772

Exploit#

No public exploit known

History#

Version 12020-09-18Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.