Skip to content
OpenAdvisories

Vendor

gocd

26 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Critical 9.4

    GoCD vulnerable to admin privilege escalation by a malicious internal/existing authenticated user

    GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to improper authorization of access to the admin "Configuration XML" UI feature, and its associated API. A malicious insider/existing authentic…

  • Critical 9.1

    Compromised agents may be able to execute remote code on GoCD Server

    GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions prior to 21.1.0 are vulnerable to remote code execution on the server from a malicious or compromi…