CVE-2021-43288

Published: Apr 14, 2022

Modified: Aug 4, 2024

PUBLISHED

Description

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker in control of a GoCD Agent can plant malicious JavaScript into a failed Job Report.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.gocd.org/releases/#21-3-0

x_refsource_MISC

https://github.com/gocd/gocd/commit/f5c1d2aa9ab302a97898a6e4b16218e64fe8e9e4

x_refsource_MISC

https://blog.sonarsource.com/gocd-vulnerability-chain

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-43288

Description

Affected Products

References