Security Advisory

CVE-2023-40349

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-08-16 14:32:57
Last updated 2024-10-08 18:22:33
Assigner jenkins
State PUBLISHED

Description

Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs.