Gradle Technologies is now Develocity — read the announcement

← All advisories

Test distribution usage search form allows XSS

Affected product(s)
  • Gradle Enterprise 2020.2 - 2020.2.4
Severity
Critical
Published
September 15, 2020
Related CVE ID(s)

Description

Cross-site scripting (XSS) vulnerability in Gradle Enterprise allows remote attacker to execute arbitrary Javascript via the request URL.

Mitigation

Upgrade to Gradle Enterprise 2020.2.5 or later.

Credit

This issue was responsibly reported by Compass Security.

© 2026 Gradle, Inc. Gradle®, Develocity®, Build Scan®, and the Gradlephant logo are registered trademarks of Gradle, Inc.

Get an AI summary of Develocity: