Vulnerabilities > Gradle > Gradle > 5.2.1

DATE CVE VULNERABILITY TITLE RISK
2019-08-14 CVE-2019-15052 Insufficiently Protected Credentials vulnerability in Gradle
The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host.
network
low complexity
gradle CWE-522
critical
 9.8
9.8
2019-04-10 CVE-2019-11065 Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used.
network
high complexity
gradle fedoraproject
5.9
5.9