Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
thoughtworks gocd vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2021-43288
An issue exists in ThoughtWorks GoCD prior to 21.3.0. An attacker in control of a GoCD Agent can plant malicious JavaScript into a failed Job Report.
Thoughtworks Gocd
NA
CVE-2023-28629
GoCD is an open source continuous delivery server. GoCD versions prior to 23.1.0 are vulnerable to a stored XSS vulnerability, where pipeline configuration with a malicious pipeline label configuration can affect browser display of pipeline runs generated from that configuration....
Thoughtworks Gocd
NA
CVE-2023-28630
GoCD is an open source continuous delivery server. In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by administrators to provide access to the relevant PostgreSQL or MySQL backup tools, the credentials for database access may be...
Thoughtworks Gocd
NA
CVE-2022-39311
GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions before 21.1.0 are vulnerable to remote code execution on the server from a malicious or compromised agent. The Spring R...
Thoughtworks Gocd
NA
CVE-2022-39310
GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions before 21.1.0 can allow one authenticated agent to impersonate another agent, and thus receive work packages for other ...
Thoughtworks Gocd
NA
CVE-2022-39309
GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions before 21.1.0 leak the symmetric key used to encrypt/decrypt any secure variables/secrets in GoCD configuration to auth...
Thoughtworks Gocd
NA
CVE-2022-39308
GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions from 19.2.0 to 19.10.0 (inclusive) are subject to a timing attack in validation of access tokens due to use of regular ...
Thoughtworks Gocd
NA
CVE-2022-36088
GoCD is a continuous delivery server. Windows installations via either the server or agent installers for GoCD before 22.2.0 do not adequately restrict permissions when installing outside of the default location. This could allow a malicious user with local access to the server G...
Thoughtworks Gocd
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2