Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
•added 2026/09/23 5:58 p.m.•11 views

CVE-2026-52744 GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion API

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines//upstream does not adequately authorize access to upstream dependency data. An authenticated user can retrieve inter-pipeline dependency hierarchy...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/23 5:58 p.m.•47 views

CVE-2026-52744 GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion API

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines//upstream does not adequately authorize access to upstream dependency data. An authenticated user can retrieve inter-pipeline dependency hierarchy...

5.3CVSS0.00427EPSS
SaveExploits0References4
osv-cve
osv-cve
•added 2026/09/23 5:58 p.m.•9 views

CVE-2026-52744 GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion API

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines//upstream does not adequately authorize access to upstream dependency data. An authenticated user can retrieve inter-pipeline dependency hierarchy...

5.3CVSS5.9AI score
SaveExploits0References6
Rows per page
Query Builder