PT-2023-27227 · Unknown · Woodpecker

Name of the Vulnerable Software and Affected Versions: Woodpecker versions prior to 1.0.2 Description: An attacker can post malformed webhook data which leads to an update of the repository data, potentially allowing the takeover of a repository. This issue is critical if the CI is configured for...

CVE-2023-40034: Improper Input Validation

Woodpecker is a community fork of the Drone CI system. In affected versions an attacker can post malformed webhook data witch lead to an update of the repository data that can e.g. allow the takeover of an repo. This is only critical if the CI is configured for public usage and connected to a for...

USN-5245-1 maven vulnerability

It was discovered that Apache Maven followed repositories that are defined in a dependency's Project Object Model pom even if the repositories weren't encrypted http protocol. An attacker could use this vulnerability to take over a repository, execute arbitrary code or cause a denial of service...

Unspecified Vulnerability in Apache Maven

Apache Maven is an application from the Apache USA Foundation. A software project management and understanding tool. Apache Maven suffers from a security vulnerability that stems from the potential risk of a malicious participant taking over the repository or being able to insert themselves into ...

Apache Maven access control error vulnerability

Apache Maven is an application from the Apache USA Foundation. A software project management and understanding tool. Apache Maven suffers from a security vulnerability that stems from the potential risk of a malicious participant taking over the repository or being able to insert themselves into ...