4 matches found
CVE-2026-55625
GoCD is a continuous deliver server. From 16.1.0 until 26.1.0, the internal material connection test APIs at /go/api/admin/internal/materialtest and /go/api/internal/configrepos//materialtest accept an arbitrary existing pipeline and pipeline-group context without sufficient validation. A pipelin...
CVE-2026-55625
GoCD , a continuous delivery server, is affected by an authorization bypass in its internal material connection test APIs (/go/api/admin/internal/material_test and /go/api/internal/config_repos/*/material_test) from version 16.1.0 through 26.1.0 . The APIs accept an arbitrary pipeline or pipeline...
CVE-2026-55625 GoCD is vulnerable to authorization bypass via material connection test APIs
GoCD is a continuous deliver server. From 16.1.0 until 26.1.0, the internal material connection test APIs at /go/api/admin/internal/materialtest and /go/api/internal/configrepos//materialtest accept an arbitrary existing pipeline and pipeline-group context without sufficient validation. A pipelin...
EUVD-2026-83952
GoCD is a continuous deliver server. From 16.1.0 until 26.1.0, the internal material connection test APIs at /go/api/admin/internal/materialtest and /go/api/internal/configrepos//materialtest accept an arbitrary existing pipeline and pipeline-group context without sufficient validation. A pipelin...