CVE-2021-43288

概要

参考情報

• blog.sonarsource.com/gocd-vulnerability-chain · Exploit
• gocd/gocd commit f5c1d2a · Patch
• gocd.org/releases · Issue Tracking

gocd のその他の脆弱性

• CVE-2024-56324高 7.1GoCD is a continuous deliver server. GoCD versions prior to 24.4.0 can allow GoCD "group admins" to abuse ability to edit the raw XML config…
• CVE-2024-56322高 7.2GoCD is a continuous deliver server. GoCD versions 16.7.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse a hidden/unused configur…
• CVE-2024-56321低 3.8GoCD is a continuous deliver server. GoCD versions 18.9.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse the backup configuration…
• CVE-2024-56320高 8.8GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to improper authorizatio…
• CVE-2024-28866中 6.1GoCD is a continuous delivery server. GoCD versions from 19.4.0 to 23.5.0 (inclusive) are potentially vulnerable to a reflected cross-site s…