Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gradle PGP签名插件输入验证错误漏洞
Vulnerability Description
Gradle是一套基于JVM的项目构建工具，它支持maven、Ivy仓库等。PGP signing plugin是其中的一个PGP（Pretty Good Privacy）签名插件。 Gradle 6.0之前版本中的PGP签名插件存在安全漏洞。攻击者可利用该漏洞实施中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A