Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/21 3:17 p.m.•14 views

CVE-2026-52742

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

5.1CVSS0.0071EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/21 3:01 p.m.•14 views

EUVD-2026-83954

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

5.1CVSS5.9AI score0.0071EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/21 3:01 p.m.•51 views

CVE-2026-52742 GoCD is vulnerable to historical server configuration API authorization bypass

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

5.1CVSS0.0071EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/21 3:01 p.m.•24 views

CVE-2026-52742

GoCD (continuous delivery server) versions 12.3.1 through 26.1.0 are affected by an authorization bypass in legacy routes under /go/admin/restful/*. These routes expose the full historical server configuration to pipeline group administrators rather than restricting responses to only the groups t...

5.1CVSS5.9AI score0.0071EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/21 3:01 p.m.•12 views

CVE-2026-52742 GoCD is vulnerable to historical server configuration API authorization bypass

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

5.1CVSS5.8AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•8 views

PT-2026-96132

Name of the Vulnerable Software and Affected Versions GoCD versions 12.3.1 through 26.0.x Description Legacy routes under the endpoint '/go/admin/restful/' expose the full historical server configuration to pipeline group administrators. This occurs because the system fails to restrict responses ...

5.1CVSS5.8AI score0.0071EPSS
SaveExploits0References9
Rows per page
Query Builder