CVE-2021-43289

2022-04-1413:15:11

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker who has compromised a GoCD agent can upload a malicious file into an arbitrary directory of a GoCD server, but does not control the filename.

CPENameOperatorVersion
gocdeq14.2.0
gocdeq16.9.0
gocdeq17.11.0
gocdeq14.3.0
gocdeq18.2.0
gocdeq17.9.0
gocdeq21.1.0
gocdeq20.2.0
gocdeq19.4.0
gocdeq16.11.0