https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T15:21:02.157533+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2020-53289 cnvd-2020-53289 2026-09-29T15:21:08.314609+00:00 cnvd-2020-53289 https://vulnerability.circl.lu/vuln/fkie_cve-2020-15776 fkie_cve-2020-15776 2026-09-29T15:21:08.314691+00:00

An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie that is not annotated as HttpOnly. An attacker with the ability to execute arbitrary code in a user's browser could impose an arbitrary value for this token, allowing them to perform cross-site request forgery.

 https://vulnerability.circl.lu/vuln/ghsa-58jg-c8v2-jcpf GHSA-58jg-c8v2-jcpf 2026-09-29T15:21:08.314766+00:00

An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. CSRF mitigation can be bypassed because the anti-CSRF token is in a cleartext cookie.

 https://vulnerability.circl.lu/vuln/gsd-2020-15776 gsd-2020-15776 2026-09-29T15:21:08.314804+00:00 gsd-2020-15776