Search
Find a vulnerability
Search criteria
14 vulnerabilities by woodpecker-ci
CVE-2026-58370 (GCVE-0-2026-58370)
Vulnerability from nvd – Published: 2026-06-30 15:57 – Updated: 2026-07-14 21:35 X_Open Source
VLAI
EPSS
VEX
Title
Woodpecker < 3.15.0 - GitLab Approval Gate Bypass via Spoofable Commit Author Name
Summary
Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author. For the GitLab forge driver, pipeline.Author is populated from the git commit author name (commit.author.name) carried in the webhook payload, which is attacker-controlled and not verified by GitLab. A user who can open a merge request from a fork can set the commit author name to match an entry in ApprovalAllowedUsers, causing needsApproval to return false so the pipeline runs without the required approval. This defeats the fork-approval security boundary and allows execution of attacker-controlled pipeline steps on a Woodpecker agent and exfiltration of CI secrets exposed to the run. Other built-in forge drivers (Gitea, Forgejo, GitHub, Bitbucket) derive pipeline.Author from the forge-validated sender/actor identity and are not affected.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-290 - Authentication Bypass by Spoofing
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/relea… | release-notes |
| https://github.com/woodpecker-ci/woodpecker/pull/6653 | issue-tracking |
| https://github.com/woodpecker-ci/woodpecker/commi… | patch |
| https://www.vulncheck.com/advisories/woodpecker-g… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
0 , < 3.15.0
(semver)
|
Date Public
2026-05-27 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58370",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-01T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-02T03:56:10.874Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/woodpecker-ci/woodpecker",
"product": "woodpecker",
"repo": "https://github.com/woodpecker-ci/woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "3.15.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.15.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Chen"
}
],
"datePublic": "2026-05-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author. For the GitLab forge driver, pipeline.Author is populated from the git commit author name (commit.author.name) carried in the webhook payload, which is attacker-controlled and not verified by GitLab. A user who can open a merge request from a fork can set the commit author name to match an entry in ApprovalAllowedUsers, causing needsApproval to return false so the pipeline runs without the required approval. This defeats the fork-approval security boundary and allows execution of attacker-controlled pipeline steps on a Woodpecker agent and exfiltration of CI secrets exposed to the run. Other built-in forge drivers (Gitea, Forgejo, GitHub, Bitbucket) derive pipeline.Author from the forge-validated sender/actor identity and are not affected."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T21:35:01.085Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.15.0"
},
{
"name": "Fix PR",
"tags": [
"issue-tracking"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/6653"
},
{
"name": "Fix Commit",
"tags": [
"patch"
],
"url": "https://github.com/woodpecker-ci/woodpecker/commit/98faae778c953678944996c89ed99307d2f16a3d"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/woodpecker-gitlab-approval-gate-bypass-via-spoofable-commit-author-name"
}
],
"tags": [
"x_open-source"
],
"title": "Woodpecker \u003c 3.15.0 - GitLab Approval Gate Bypass via Spoofable Commit Author Name",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-58370",
"datePublished": "2026-06-30T15:57:09.624Z",
"dateReserved": "2026-06-30T12:15:07.392Z",
"dateUpdated": "2026-07-14T21:35:01.085Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-58369 (GCVE-0-2026-58369)
Vulnerability from nvd – Published: 2026-06-30 15:56 – Updated: 2026-07-14 21:35 X_Open Source
VLAI
EPSS
VEX
Title
Woodpecker < 3.15.0 - Unauthenticated NULL Pointer Dereference in /api/orgs/lookup Enables Log-Flooding Denial of Service
Summary
Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the LookupOrg handler unconditionally dereferences the session user (user.ForgeID, via ForgeFromUser) when selecting the forge to query. For an unauthenticated request session.User returns nil, so any unauthenticated HTTP request triggers a NULL pointer dereference in the handler. The panic is recovered by gin recovery middleware and the server continues serving (returning HTTP 500), but each request writes a multi-line panic stack trace to the error log. A low-bandwidth unauthenticated attacker can repeatedly probe the endpoint to flood the logs (about 37 lines per request), inflating disk usage and downstream log-ingestion cost and burying legitimate log events.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/relea… | release-notes |
| https://github.com/woodpecker-ci/woodpecker/pull/6652 | issue-tracking |
| https://github.com/woodpecker-ci/woodpecker/commi… | patch |
| https://www.vulncheck.com/advisories/woodpecker-u… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
0 , < 3.15.0
(semver)
|
Date Public
2026-05-27 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58369",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-30T17:52:17.979127Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-30T17:53:12.541Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/woodpecker-ci/woodpecker",
"product": "woodpecker",
"repo": "https://github.com/woodpecker-ci/woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "3.15.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.15.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Chen"
}
],
"datePublic": "2026-05-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the LookupOrg handler unconditionally dereferences the session user (user.ForgeID, via ForgeFromUser) when selecting the forge to query. For an unauthenticated request session.User returns nil, so any unauthenticated HTTP request triggers a NULL pointer dereference in the handler. The panic is recovered by gin recovery middleware and the server continues serving (returning HTTP 500), but each request writes a multi-line panic stack trace to the error log. A low-bandwidth unauthenticated attacker can repeatedly probe the endpoint to flood the logs (about 37 lines per request), inflating disk usage and downstream log-ingestion cost and burying legitimate log events."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T21:35:00.414Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.15.0"
},
{
"name": "Fix PR",
"tags": [
"issue-tracking"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/6652"
},
{
"name": "Fix Commit",
"tags": [
"patch"
],
"url": "https://github.com/woodpecker-ci/woodpecker/commit/1fbacac3a43b75b6e5a0a40a4f720a0017c62010"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/woodpecker-unauthenticated-null-pointer-dereference-in-api-orgs-lookup-enables-log-flooding-denial-of-service"
}
],
"tags": [
"x_open-source"
],
"title": "Woodpecker \u003c 3.15.0 - Unauthenticated NULL Pointer Dereference in /api/orgs/lookup Enables Log-Flooding Denial of Service",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-58369",
"datePublished": "2026-06-30T15:56:45.044Z",
"dateReserved": "2026-06-30T12:13:02.506Z",
"dateUpdated": "2026-07-14T21:35:00.414Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-50141 (GCVE-0-2026-50141)
Vulnerability from nvd – Published: 2026-06-18 14:13 – Updated: 2026-06-18 16:10
VLAI
EPSS
VEX
Title
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation
Summary
Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged `agent_id` value into outgoing gRPC metadata. The server correctly verified the JWT token but then discarded the verified agent identity in favor of the client-supplied value. Version 3.14.1 patches the issue. As a workaround, disable org agents (`WOODPECKER_DISABLE_USER_AGENT_REGISTRATION=true`) and delete existing ones.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/secur… | x_refsource_CONFIRM |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/issues/6541 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/6567 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/6569 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
>= 3.0.0, < 3.14.1
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-50141",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-18T15:21:39.524543Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-18T16:10:41.914Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.0.0, \u003c 3.14.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI\u0027s gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged `agent_id` value into outgoing gRPC metadata. The server correctly verified the JWT token but then discarded the verified agent identity in favor of the client-supplied value. Version 3.14.1 patches the issue. As a workaround, disable org agents (`WOODPECKER_DISABLE_USER_AGENT_REGISTRATION=true`) and delete existing ones."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290: Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-18T14:13:38.065Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/21",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/21"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/6541",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/6541"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/6567",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/6567"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/6569",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/6569"
}
],
"source": {
"advisory": "GHSA-g7mm-9vx7-jm7h",
"discovery": "UNKNOWN"
},
"title": "Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-50141",
"datePublished": "2026-06-18T14:13:38.065Z",
"dateReserved": "2026-06-03T18:49:32.275Z",
"dateUpdated": "2026-06-18T16:10:41.914Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-41122 (GCVE-0-2024-41122)
Vulnerability from nvd – Published: 2024-07-19 19:58 – Updated: 2024-08-02 04:46
VLAI
EPSS
VEX
Title
Custom environment variables allow to alter execution flow of plugins in Woodpecker
Summary
Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/secur… | x_refsource_CONFIRM |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/issues/3929 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/3909 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/3934 | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
< 2.7.0
|
|
| woodpecker-ci | woodpecker |
Affected:
0 , < 2.7.0
(custom)
cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "2.7.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-41122",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-22T17:39:33.315211Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-26T16:02:57.303Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T04:46:52.559Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/10",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/10"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/3929",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/3929"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3909",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3909"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3934",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3934"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"status": "affected",
"version": "\u003c 2.7.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who\u0027s entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-19T19:58:41.180Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/10",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/10"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/3929",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/3929"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3909",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3909"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3934",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3934"
}
],
"source": {
"advisory": "GHSA-3wf2-2pq4-4rvc",
"discovery": "UNKNOWN"
},
"title": "Custom environment variables allow to alter execution flow of plugins in Woodpecker"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2024-41122",
"datePublished": "2024-07-19T19:58:41.180Z",
"dateReserved": "2024-07-15T15:53:28.323Z",
"dateUpdated": "2024-08-02T04:46:52.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-41121 (GCVE-0-2024-41121)
Vulnerability from nvd – Published: 2024-07-19 19:57 – Updated: 2024-08-02 04:46
VLAI
EPSS
VEX
Title
Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker
Summary
Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/secur… | x_refsource_CONFIRM |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/issues/3924 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/3933 | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
< 2.7.0
|
|
| woodpecker-ci | woodpecker |
Affected:
0 , < 2.7.0
(custom)
cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "2.7.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-41121",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-23T15:08:10.669502Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-24T18:44:00.223Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T04:46:51.560Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/8",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/8"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/9",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/9"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/3924",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/3924"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/pull/11",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/pull/11"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3933",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3933"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"status": "affected",
"version": "\u003c 2.7.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who\u0027s entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-19T19:57:15.924Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/8"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/9"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/3924",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/3924"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/pull/11",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/pull/11"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3933",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3933"
}
],
"source": {
"advisory": "GHSA-xw35-rrcp-g7xm",
"discovery": "UNKNOWN"
},
"title": "Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2024-41121",
"datePublished": "2024-07-19T19:57:15.924Z",
"dateReserved": "2024-07-15T15:53:28.323Z",
"dateUpdated": "2024-08-02T04:46:51.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-40034 (GCVE-0-2023-40034)
Vulnerability from nvd – Published: 2023-08-16 20:48 – Updated: 2024-10-02 19:57
VLAI
EPSS
VEX
Title
Repositoty takeover in woodpecker-ci
Summary
Woodpecker is a community fork of the Drone CI system. In affected versions an attacker can post malformed webhook data witch lead to an update of the repository data that can e.g. allow the takeover of an repo. This is only critical if the CI is configured for public usage and connected to a forge witch is also in public usage. This issue has been addressed in version 1.0.2. Users are advised to upgrade. Users unable to upgrade should secure the CI system by making it inaccessible to untrusted entities, for example, by placing it behind a firewall.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-20 - Improper Input Validation
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/secur… | x_refsource_CONFIRM |
| https://github.com/woodpecker-ci/woodpecker/pull/2221 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/2222 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/commi… | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
>= 1.0.0, < 1.0.2
|
|
| woodpecker-ci | woodpecker |
Affected:
1.0.0 , < 1.0.2
(custom)
cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T18:24:55.528Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/2221",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/2221"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/2222",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/2222"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "1.0.2",
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-40034",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-02T19:56:26.550569Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-02T19:57:12.309Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.0.0, \u003c 1.0.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker is a community fork of the Drone CI system. In affected versions an attacker can post malformed webhook data witch lead to an update of the repository data that can e.g. allow the takeover of an repo. This is only critical if the CI is configured for public usage and connected to a forge witch is also in public usage. This issue has been addressed in version 1.0.2. Users are advised to upgrade. Users unable to upgrade should secure the CI system by making it inaccessible to untrusted entities, for example, by placing it behind a firewall."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-08-16T20:48:03.087Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/2221",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/2221"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/2222",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/2222"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105"
}
],
"source": {
"advisory": "GHSA-4gcf-5m39-98mc",
"discovery": "UNKNOWN"
},
"title": "Repositoty takeover in woodpecker-ci"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2023-40034",
"datePublished": "2023-08-16T20:48:03.087Z",
"dateReserved": "2023-08-08T13:46:25.244Z",
"dateUpdated": "2024-10-02T19:57:12.309Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-29947 (GCVE-0-2022-29947)
Vulnerability from nvd – Published: 2022-04-29 20:23 – Updated: 2024-08-03 06:33
VLAI
EPSS
VEX
Summary
Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/relea… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/879 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T06:33:43.279Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/879"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-04-29T20:23:22.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/879"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-29947",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1",
"refsource": "MISC",
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/879",
"refsource": "MISC",
"url": "https://github.com/woodpecker-ci/woodpecker/pull/879"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-29947",
"datePublished": "2022-04-29T20:23:22.000Z",
"dateReserved": "2022-04-29T00:00:00.000Z",
"dateUpdated": "2024-08-03T06:33:43.279Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-58370 (GCVE-0-2026-58370)
Vulnerability from cvelistv5 – Published: 2026-06-30 15:57 – Updated: 2026-07-14 21:35 X_Open Source
VLAI
EPSS
VEX
Title
Woodpecker < 3.15.0 - GitLab Approval Gate Bypass via Spoofable Commit Author Name
Summary
Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author. For the GitLab forge driver, pipeline.Author is populated from the git commit author name (commit.author.name) carried in the webhook payload, which is attacker-controlled and not verified by GitLab. A user who can open a merge request from a fork can set the commit author name to match an entry in ApprovalAllowedUsers, causing needsApproval to return false so the pipeline runs without the required approval. This defeats the fork-approval security boundary and allows execution of attacker-controlled pipeline steps on a Woodpecker agent and exfiltration of CI secrets exposed to the run. Other built-in forge drivers (Gitea, Forgejo, GitHub, Bitbucket) derive pipeline.Author from the forge-validated sender/actor identity and are not affected.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-290 - Authentication Bypass by Spoofing
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/relea… | release-notes |
| https://github.com/woodpecker-ci/woodpecker/pull/6653 | issue-tracking |
| https://github.com/woodpecker-ci/woodpecker/commi… | patch |
| https://www.vulncheck.com/advisories/woodpecker-g… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
0 , < 3.15.0
(semver)
|
Date Public
2026-05-27 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58370",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-01T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-02T03:56:10.874Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/woodpecker-ci/woodpecker",
"product": "woodpecker",
"repo": "https://github.com/woodpecker-ci/woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "3.15.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.15.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Chen"
}
],
"datePublic": "2026-05-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author. For the GitLab forge driver, pipeline.Author is populated from the git commit author name (commit.author.name) carried in the webhook payload, which is attacker-controlled and not verified by GitLab. A user who can open a merge request from a fork can set the commit author name to match an entry in ApprovalAllowedUsers, causing needsApproval to return false so the pipeline runs without the required approval. This defeats the fork-approval security boundary and allows execution of attacker-controlled pipeline steps on a Woodpecker agent and exfiltration of CI secrets exposed to the run. Other built-in forge drivers (Gitea, Forgejo, GitHub, Bitbucket) derive pipeline.Author from the forge-validated sender/actor identity and are not affected."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T21:35:01.085Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.15.0"
},
{
"name": "Fix PR",
"tags": [
"issue-tracking"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/6653"
},
{
"name": "Fix Commit",
"tags": [
"patch"
],
"url": "https://github.com/woodpecker-ci/woodpecker/commit/98faae778c953678944996c89ed99307d2f16a3d"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/woodpecker-gitlab-approval-gate-bypass-via-spoofable-commit-author-name"
}
],
"tags": [
"x_open-source"
],
"title": "Woodpecker \u003c 3.15.0 - GitLab Approval Gate Bypass via Spoofable Commit Author Name",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-58370",
"datePublished": "2026-06-30T15:57:09.624Z",
"dateReserved": "2026-06-30T12:15:07.392Z",
"dateUpdated": "2026-07-14T21:35:01.085Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-58369 (GCVE-0-2026-58369)
Vulnerability from cvelistv5 – Published: 2026-06-30 15:56 – Updated: 2026-07-14 21:35 X_Open Source
VLAI
EPSS
VEX
Title
Woodpecker < 3.15.0 - Unauthenticated NULL Pointer Dereference in /api/orgs/lookup Enables Log-Flooding Denial of Service
Summary
Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the LookupOrg handler unconditionally dereferences the session user (user.ForgeID, via ForgeFromUser) when selecting the forge to query. For an unauthenticated request session.User returns nil, so any unauthenticated HTTP request triggers a NULL pointer dereference in the handler. The panic is recovered by gin recovery middleware and the server continues serving (returning HTTP 500), but each request writes a multi-line panic stack trace to the error log. A low-bandwidth unauthenticated attacker can repeatedly probe the endpoint to flood the logs (about 37 lines per request), inflating disk usage and downstream log-ingestion cost and burying legitimate log events.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/relea… | release-notes |
| https://github.com/woodpecker-ci/woodpecker/pull/6652 | issue-tracking |
| https://github.com/woodpecker-ci/woodpecker/commi… | patch |
| https://www.vulncheck.com/advisories/woodpecker-u… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
0 , < 3.15.0
(semver)
|
Date Public
2026-05-27 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-58369",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-30T17:52:17.979127Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-30T17:53:12.541Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/woodpecker-ci/woodpecker",
"product": "woodpecker",
"repo": "https://github.com/woodpecker-ci/woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "3.15.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.15.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Chen"
}
],
"datePublic": "2026-05-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authentication middleware, and the LookupOrg handler unconditionally dereferences the session user (user.ForgeID, via ForgeFromUser) when selecting the forge to query. For an unauthenticated request session.User returns nil, so any unauthenticated HTTP request triggers a NULL pointer dereference in the handler. The panic is recovered by gin recovery middleware and the server continues serving (returning HTTP 500), but each request writes a multi-line panic stack trace to the error log. A low-bandwidth unauthenticated attacker can repeatedly probe the endpoint to flood the logs (about 37 lines per request), inflating disk usage and downstream log-ingestion cost and burying legitimate log events."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T21:35:00.414Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.15.0"
},
{
"name": "Fix PR",
"tags": [
"issue-tracking"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/6652"
},
{
"name": "Fix Commit",
"tags": [
"patch"
],
"url": "https://github.com/woodpecker-ci/woodpecker/commit/1fbacac3a43b75b6e5a0a40a4f720a0017c62010"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/woodpecker-unauthenticated-null-pointer-dereference-in-api-orgs-lookup-enables-log-flooding-denial-of-service"
}
],
"tags": [
"x_open-source"
],
"title": "Woodpecker \u003c 3.15.0 - Unauthenticated NULL Pointer Dereference in /api/orgs/lookup Enables Log-Flooding Denial of Service",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-58369",
"datePublished": "2026-06-30T15:56:45.044Z",
"dateReserved": "2026-06-30T12:13:02.506Z",
"dateUpdated": "2026-07-14T21:35:00.414Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-50141 (GCVE-0-2026-50141)
Vulnerability from cvelistv5 – Published: 2026-06-18 14:13 – Updated: 2026-06-18 16:10
VLAI
EPSS
VEX
Title
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation
Summary
Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged `agent_id` value into outgoing gRPC metadata. The server correctly verified the JWT token but then discarded the verified agent identity in favor of the client-supplied value. Version 3.14.1 patches the issue. As a workaround, disable org agents (`WOODPECKER_DISABLE_USER_AGENT_REGISTRATION=true`) and delete existing ones.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/secur… | x_refsource_CONFIRM |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/issues/6541 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/6567 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/6569 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
>= 3.0.0, < 3.14.1
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-50141",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-18T15:21:39.524543Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-18T16:10:41.914Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.0.0, \u003c 3.14.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI\u0027s gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged `agent_id` value into outgoing gRPC metadata. The server correctly verified the JWT token but then discarded the verified agent identity in favor of the client-supplied value. Version 3.14.1 patches the issue. As a workaround, disable org agents (`WOODPECKER_DISABLE_USER_AGENT_REGISTRATION=true`) and delete existing ones."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290: Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-18T14:13:38.065Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/21",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/21"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/6541",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/6541"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/6567",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/6567"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/6569",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/6569"
}
],
"source": {
"advisory": "GHSA-g7mm-9vx7-jm7h",
"discovery": "UNKNOWN"
},
"title": "Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-50141",
"datePublished": "2026-06-18T14:13:38.065Z",
"dateReserved": "2026-06-03T18:49:32.275Z",
"dateUpdated": "2026-06-18T16:10:41.914Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-41122 (GCVE-0-2024-41122)
Vulnerability from cvelistv5 – Published: 2024-07-19 19:58 – Updated: 2024-08-02 04:46
VLAI
EPSS
VEX
Title
Custom environment variables allow to alter execution flow of plugins in Woodpecker
Summary
Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/secur… | x_refsource_CONFIRM |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/issues/3929 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/3909 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/3934 | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
< 2.7.0
|
|
| woodpecker-ci | woodpecker |
Affected:
0 , < 2.7.0
(custom)
cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "2.7.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-41122",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-22T17:39:33.315211Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-26T16:02:57.303Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T04:46:52.559Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/10",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/10"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/3929",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/3929"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3909",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3909"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3934",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3934"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"status": "affected",
"version": "\u003c 2.7.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who\u0027s entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-19T19:58:41.180Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-3wf2-2pq4-4rvc"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/10",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/10"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/3929",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/3929"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3909",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3909"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3934",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3934"
}
],
"source": {
"advisory": "GHSA-3wf2-2pq4-4rvc",
"discovery": "UNKNOWN"
},
"title": "Custom environment variables allow to alter execution flow of plugins in Woodpecker"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2024-41122",
"datePublished": "2024-07-19T19:58:41.180Z",
"dateReserved": "2024-07-15T15:53:28.323Z",
"dateUpdated": "2024-08-02T04:46:52.559Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-41121 (GCVE-0-2024-41121)
Vulnerability from cvelistv5 – Published: 2024-07-19 19:57 – Updated: 2024-08-02 04:46
VLAI
EPSS
VEX
Title
Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker
Summary
Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who's entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/secur… | x_refsource_CONFIRM |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/issues/3924 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker-secur… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/3933 | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
< 2.7.0
|
|
| woodpecker-ci | woodpecker |
Affected:
0 , < 2.7.0
(custom)
cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "2.7.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-41121",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-23T15:08:10.669502Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-24T18:44:00.223Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T04:46:51.560Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/8",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/8"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/9",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/9"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/3924",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/3924"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/pull/11",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/pull/11"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3933",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3933"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"status": "affected",
"version": "\u003c 2.7.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker is a simple yet powerful CI/CD engine with great extensibility. The server allow to create any user who can trigger a pipeline run malicious workflows: 1. Those workflows can either lead to a host takeover that runs the agent executing the workflow. 2. Or allow to extract the secrets who would be normally provided to the plugins who\u0027s entrypoint are overwritten. This issue has been addressed in release version 2.7.0. Users are advised to upgrade. There are no known workarounds for this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-19T19:57:15.924Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-xw35-rrcp-g7xm"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/8"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/issues/9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/issues/9"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/issues/3924",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/issues/3924"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker-security/pull/11",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker-security/pull/11"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/3933",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/3933"
}
],
"source": {
"advisory": "GHSA-xw35-rrcp-g7xm",
"discovery": "UNKNOWN"
},
"title": "Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2024-41121",
"datePublished": "2024-07-19T19:57:15.924Z",
"dateReserved": "2024-07-15T15:53:28.323Z",
"dateUpdated": "2024-08-02T04:46:51.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-40034 (GCVE-0-2023-40034)
Vulnerability from cvelistv5 – Published: 2023-08-16 20:48 – Updated: 2024-10-02 19:57
VLAI
EPSS
VEX
Title
Repositoty takeover in woodpecker-ci
Summary
Woodpecker is a community fork of the Drone CI system. In affected versions an attacker can post malformed webhook data witch lead to an update of the repository data that can e.g. allow the takeover of an repo. This is only critical if the CI is configured for public usage and connected to a forge witch is also in public usage. This issue has been addressed in version 1.0.2. Users are advised to upgrade. Users unable to upgrade should secure the CI system by making it inaccessible to untrusted entities, for example, by placing it behind a firewall.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-20 - Improper Input Validation
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/secur… | x_refsource_CONFIRM |
| https://github.com/woodpecker-ci/woodpecker/pull/2221 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/2222 | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/commi… | x_refsource_MISC |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| woodpecker-ci | woodpecker |
Affected:
>= 1.0.0, < 1.0.2
|
|
| woodpecker-ci | woodpecker |
Affected:
1.0.0 , < 1.0.2
(custom)
cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T18:24:55.528Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/2221",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/2221"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/2222",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/2222"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"lessThan": "1.0.2",
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-40034",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-02T19:56:26.550569Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-02T19:57:12.309Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "woodpecker",
"vendor": "woodpecker-ci",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.0.0, \u003c 1.0.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker is a community fork of the Drone CI system. In affected versions an attacker can post malformed webhook data witch lead to an update of the repository data that can e.g. allow the takeover of an repo. This is only critical if the CI is configured for public usage and connected to a forge witch is also in public usage. This issue has been addressed in version 1.0.2. Users are advised to upgrade. Users unable to upgrade should secure the CI system by making it inaccessible to untrusted entities, for example, by placing it behind a firewall."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-08-16T20:48:03.087Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-4gcf-5m39-98mc"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/2221",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/2221"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/2222",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/2222"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/commit/6e4c2f84cc84661d58cf1c0e5c421a46070bb105"
}
],
"source": {
"advisory": "GHSA-4gcf-5m39-98mc",
"discovery": "UNKNOWN"
},
"title": "Repositoty takeover in woodpecker-ci"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2023-40034",
"datePublished": "2023-08-16T20:48:03.087Z",
"dateReserved": "2023-08-08T13:46:25.244Z",
"dateUpdated": "2024-10-02T19:57:12.309Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-29947 (GCVE-0-2022-29947)
Vulnerability from cvelistv5 – Published: 2022-04-29 20:23 – Updated: 2024-08-03 06:33
VLAI
EPSS
VEX
Summary
Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/woodpecker-ci/woodpecker/relea… | x_refsource_MISC |
| https://github.com/woodpecker-ci/woodpecker/pull/879 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T06:33:43.279Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/879"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-04-29T20:23:22.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/woodpecker-ci/woodpecker/pull/879"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-29947",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1",
"refsource": "MISC",
"url": "https://github.com/woodpecker-ci/woodpecker/releases/tag/v0.15.1"
},
{
"name": "https://github.com/woodpecker-ci/woodpecker/pull/879",
"refsource": "MISC",
"url": "https://github.com/woodpecker-ci/woodpecker/pull/879"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-29947",
"datePublished": "2022-04-29T20:23:22.000Z",
"dateReserved": "2022-04-29T00:00:00.000Z",
"dateUpdated": "2024-08-03T06:33:43.279Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}