Security Advisory

CVE-2021-43286

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-14 12:55:51

Last updated 2024-08-04 03:55:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker with privileges to create a new pipeline on a GoCD server can abuse a command-line injection in the Git URL "Test Connection" feature to execute arbitrary code.

← Browse all CVEs View on cve.org ↗