6 matches found
CVE-2023-40348
The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output...
CVE-2023-40348
creationtimestamp| type| source ---|---|--- 2023-08-16 18:49:55+00:00| seen| https://t.me/cibsecurity/68662...
CVE-2023-40348
The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output...
CVE-2023-40348
The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output...
CVE-2023-40348
CVE-2023-40348 affects the Jenkins Gogs Plugin (versions up to 1.0.15). The webhook endpoint at /gogs-webhook can be reached by unauthenticated attackers and discloses whether a specific job exists, even if the attacker lacks permission to access that job. The root cause is an information-disclos...
