1 matches found
Webhook endpoint discloses job names to unauthorized users in mercurial
mercurial provides a webhook endpoint at /mercurial/notifyCommit that can be used to notify Jenkins of changes to an SCM repository. This endpoint receives a repository URL, and Jenkins will schedule polling for all jobs configured with the specified repository. It can be accessed with GET reques...
5.3CVSS5.5AI score0.00712EPSS
SaveExploits0Affected Software1
20