The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform allows a malicious actor to alter the configuration of CI/CD processes. This vulnerability enables a hacker to modify the setup of CI/CD workflows.

The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform relates to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow an attacker to remotely alter the CI/CD configuration...