cve/2019/CVE-2019-15052.md
2024-06-18 02:51:15 +02:00

745 B

CVE-2019-15052

Description

The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. If that host returns a 30x redirect, Gradle also sends those credentials to all subsequent hosts that the request redirects to. This is similar to CVE-2018-1000007.

POC

Reference

Github

No PoCs found on GitHub currently.