Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/11/15 12:00 a.m.•12 views

Lack of authentication mechanism for webhook in dockerhub-notification

dockerhub-notification provides several webhook endpoints that can be used to trigger builds when Docker images used by a job have been rebuilt. In dockerhub-notification 2.6.2 and earlier, these endpoints can be accessed without authentication. This allows unauthenticated attackers to trigger...

7.5CVSS7.3AI score0.00604EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder