Woodpecker allows cross-site scripting (XSS) via build logs

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-29947 · ADVISORY
• woodpecker-ci/woodpecker#879 · WEB
• woodpecker-ci/woodpecker · WEB
• woodpecker-ci/woodpecker release v0.15.1 · WEB
• GitHub Advisory GHSA-vmp5-c5hp-6c65 · ADVISORY

Lỗ hổng khác của github.com/woodpecker-ci/woodpecker

• CVE-2026-61549NGHIÊM TRỌNG 9.0Woodpecker is a CI/CD engine. From 1.0.0 until 3.16.0, pipeline/backend/kubernetes/backend_options.go defines backend_options.kubernetes.ser…
• CVE-2023-40034CAO 8.1Woodpecker is a community fork of the Drone CI system. In affected versions an attacker can post malformed webhook data witch lead to an upd…