CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
48.8%
Woodpecker does not validate webhook before changing any data in github.com/woodpecker-ci/woodpecker
github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105
github.com/woodpecker-ci/woodpecker/pull/2221
github.com/woodpecker-ci/woodpecker/pull/2222
github.com/woodpecker-ci/woodpecker/releases/tag/v1.0.2
github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc
nvd.nist.gov/vuln/detail/CVE-2023-40034
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
48.8%