Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/09/21 12:00 a.m.•15 views

Lack of authentication mechanism in DotCi webhook

DotCi provides a webhook endpoint at /githook/ that can be used to trigger builds of the job for a GitHub repository. In DotCi 2.40.00 and earlier, this endpoint can be accessed without authentication. This allows unauthenticated attackers to trigger builds of jobs corresponding to the...

9.8CVSS8.2AI score0.01138EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder