1 matches found
Lack of authentication mechanism for webhook in dockerhub-notification
dockerhub-notification provides several webhook endpoints that can be used to trigger builds when Docker images used by a job have been rebuilt. In dockerhub-notification 2.6.2 and earlier, these endpoints can be accessed without authentication. This allows unauthenticated attackers to trigger...
7.5CVSS7.3AI score0.00604EPSS
SaveExploits0Affected Software1
20