OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

gocd request forgery vulnerability

gocd is a continuous delivery server. gocd has a server-side request forgery vulnerability in version 21.3.0, which stems from the product's failure to properly validate user input and could be exploited to probe the server's intranet resources...

Server side request forgery (ssrf)

DISPUTED Adding a new pipeline in GoCD server version 21.3.0 has a functionality that could be abused to do an un-intended action in order to achieve a Server Side Request Forgery SSRF. NOTE: the vendor's position is that the observed behavior is not a vulnerability, because the product's design...

PT-2021-24143 · Unknown · Gocd Server

Name of the Vulnerable Software and Affected Versions: GoCD server version 21.3.0 Description: The issue concerns a functionality in the GoCD server that could be exploited to achieve a Server Side Request Forgery SSRF. This is possible when adding a new pipeline. The vendor's position is that th...