1 matches found
Lack of authentication mechanism in DotCi webhook
DotCi provides a webhook endpoint at /githook/ that can be used to trigger builds of the job for a GitHub repository. In DotCi 2.40.00 and earlier, this endpoint can be accessed without authentication. This allows unauthenticated attackers to trigger builds of jobs corresponding to the...
9.8CVSS8.2AI score0.01138EPSS
SaveExploits0Affected Software1
20