Cross-Site Scripting (XSS)

github.com/woodpecker-ci/woodpecker is vulnerable to cross-site scripting. The vulnerability exists in BuildLog.vue due to lack of escaping in build logs which allows an attacker to inject and execute arbitrary javascript...

CVE-2022-29947

Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping...

PT-2022-19928 · Unknown · Woodpecker

Name of the Vulnerable Software and Affected Versions: Woodpecker versions prior to 0.15.1 Description: The issue allows cross-site scripting XSS via build logs because the BuildLog.vue component in web/src/components/repo/build lacks proper escaping. This can lead to the execution of malicious...