Gocd

16 CVEs across 1 Gocd products. Browse Gocd vulnerabilities, severities, and proof-of-concept exploits.

Gocd products with known CVEs

ProductCVEs
Gocd16
Gocd CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-56324High7.12025-01-03GoCD is a continuous deliver server. GoCD versions prior to 24.4.0 can allow GoCD "group admins" to abuse ability to edit the raw XML configuration for groups…
CVE-2024-56322High7.22025-01-03GoCD is a continuous deliver server. GoCD versions 16.7.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse a hidden/unused configuration repository (p…
CVE-2024-56321Low3.82025-01-03GoCD is a continuous deliver server. GoCD versions 18.9.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse the backup configuration "post-backup scrip…
CVE-2024-56320High8.82025-01-03GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to improper authorization of access to the…
CVE-2024-28866Low3.12024-05-14GoCD is a continuous delivery server. GoCD versions from 19.4.0 to 23.5.0 (inclusive) are potentially vulnerable to a reflected cross-site scripting vulnerabil…
CVE-2023-28630Medium4.22023-03-27GoCD is an open source continuous delivery server. In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by admi…
CVE-2023-28629Medium5.42023-03-27GoCD is an open source continuous delivery server. GoCD versions before 23.1.0 are vulnerable to a stored XSS vulnerability, where pipeline configuration with…
CVE-2022-39311Critical9.12022-10-14GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD version…
CVE-2022-39310Medium4.92022-10-14GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD version…
CVE-2022-39309Medium4.92022-10-14GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD version…
CVE-2022-39308Medium6.52022-10-14GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD version…
CVE-2022-36088Medium5.02022-09-07GoCD is a continuous delivery server. Windows installations via either the server or agent installers for GoCD prior to 22.2.0 do not adequately restrict permi…
CVE-2022-29184High8.82022-05-20GoCD is a continuous delivery server. In GoCD versions prior to 22.1.0, it is possible for existing authenticated users who have permissions to edit or create…
CVE-2022-29183Medium4.32022-05-20GoCD is a continuous delivery server. GoCD versions 20.2.0 until 21.4.0 are vulnerable to reflected cross-site scripting via abuse of the pipeline comparison f…
CVE-2022-29182Medium4.32022-05-20GoCD is a continuous delivery server. GoCD versions 19.11.0 through 21.4.0 (inclusive) are vulnerable to a Document Object Model (DOM)-based cross-site scripti…
CVE-2022-24832High8.22022-04-11GoCD is an open source a continuous delivery server. The bundled gocd-ldap-authentication-plugin included with the GoCD Server fails to correctly escape specia…