agentprime: gocdEvery new CVE for gocd.https://agentprime.io/CVE-2026-55632: GoCD is vulnerable to authorization bypass via pipeline structure APIhttps://agentprime.io/advisories/CVE-2026-55632/https://agentprime.io/advisories/CVE-2026-55632/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:59:10 GMTCVECVE-2026-52744: GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion APIhttps://agentprime.io/advisories/CVE-2026-52744/https://agentprime.io/advisories/CVE-2026-52744/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 17:58:52 GMTCVECVE-2026-52742: GoCD is vulnerable to historical server configuration API authorization bypasshttps://agentprime.io/advisories/CVE-2026-52742/https://agentprime.io/advisories/CVE-2026-52742/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 15:01:42 GMTCVECVE-2026-55870: GoCD is vulnerable to credential exposure when admins insecurely configure material URLshttps://agentprime.io/advisories/CVE-2026-55870/https://agentprime.io/advisories/CVE-2026-55870/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 15:00:48 GMTCVECVE-2026-55625: GoCD is vulnerable to authorization bypass via material connection test APIshttps://agentprime.io/advisories/CVE-2026-55625/https://agentprime.io/advisories/CVE-2026-55625/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 15:00:03 GMTCVECVE-2026-52740: GoCD is vulnerable to pipeline template view API authorization bypasshttps://agentprime.io/advisories/CVE-2026-52740/https://agentprime.io/advisories/CVE-2026-52740/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 14:59:15 GMTCVECVE-2026-55060: GoCD is vulnerable to authorization bypass via support process list APIhttps://agentprime.io/advisories/CVE-2026-55060/https://agentprime.io/advisories/CVE-2026-55060/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 14:58:39 GMTCVECVE-2026-52741: GoCD has stored XSS possible via tracking tool link highlighting on Compare Pipeline pageshttps://agentprime.io/advisories/CVE-2026-52741/https://agentprime.io/advisories/CVE-2026-52741/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 14:57:50 GMTCVECVE-2026-68919: GoCD has stored XSS possible via forged package material comments on Stage/Job/VSM pageshttps://agentprime.io/advisories/CVE-2026-68919/https://agentprime.io/advisories/CVE-2026-68919/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 14:56:23 GMTCVECVE-2026-52743: GoCD before 26.1.0 is vulnerable to authorization bypass via job status APIhttps://agentprime.io/advisories/CVE-2026-52743/https://agentprime.io/advisories/CVE-2026-52743/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 14:24:57 GMTCVECVE-2024-56324: GoCD vulnerable to XXE injection via abuse of pipeline XML "snippet" editing by group adminshttps://agentprime.io/advisories/CVE-2024-56324/https://agentprime.io/advisories/CVE-2024-56324/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jan 2025 15:56:52 GMTCVECVE-2024-56322: GoCD vulnerable to XXE injection via abuse of unused XML configuration repository functionalityhttps://agentprime.io/advisories/CVE-2024-56322/https://agentprime.io/advisories/CVE-2024-56322/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jan 2025 15:49:48 GMTCVECVE-2024-56321: GoCD can allow malicious GoCD admins to abuse backup configuration to gain additional host accesshttps://agentprime.io/advisories/CVE-2024-56321/https://agentprime.io/advisories/CVE-2024-56321/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jan 2025 15:41:40 GMTCVECVE-2024-56320: GoCD vulnerable to admin privilege escalation by a malicious internal/existing authenticated userhttps://agentprime.io/advisories/CVE-2024-56320/https://agentprime.io/advisories/CVE-2024-56320/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jan 2025 15:37:12 GMTCVEcriticalCVE-2024-28866: GoCD vulnerable to reflected Cross-site Scripting possible on server loading page during start-uphttps://agentprime.io/advisories/CVE-2024-28866/https://agentprime.io/advisories/CVE-2024-28866/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 May 2024 13:53:30 GMTCVECVE-2023-28629: Stored XSS possible on VSM and Job Details pages via malicious pipeline label configuration in gocdhttps://agentprime.io/advisories/CVE-2023-28629/https://agentprime.io/advisories/CVE-2023-28629/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Mar 2023 20:36:27 GMTCVECVE-2023-28630: Sensitive information disclosure possible on misconfigured failed backups of non-H2 databases in gocdhttps://agentprime.io/advisories/CVE-2023-28630/https://agentprime.io/advisories/CVE-2023-28630/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Mar 2023 20:33:48 GMTCVECVE-2022-39311: Compromised agents may be able to execute remote code on GoCD Serverhttps://agentprime.io/advisories/CVE-2022-39311/https://agentprime.io/advisories/CVE-2022-39311/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Oct 2022 00:00:00 GMTCVEcriticalCVE-2022-39310: Malicious agent may be able to impersonate another agent in GoCDhttps://agentprime.io/advisories/CVE-2022-39310/https://agentprime.io/advisories/CVE-2022-39310/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Oct 2022 00:00:00 GMTCVECVE-2022-39309: GoCD server secret encryption/decryption key leaked to agents during material serializationhttps://agentprime.io/advisories/CVE-2022-39309/https://agentprime.io/advisories/CVE-2022-39309/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Oct 2022 00:00:00 GMTCVECVE-2022-39308: GoCD API authentication of user access tokens subject to timing attack during comparisonhttps://agentprime.io/advisories/CVE-2022-39308/https://agentprime.io/advisories/CVE-2022-39308/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Oct 2022 00:00:00 GMTCVECVE-2022-36088: GoCD Windows installations outside default location inadequately restrict installation file permissionshttps://agentprime.io/advisories/CVE-2022-36088/https://agentprime.io/advisories/CVE-2022-36088/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Sep 2022 22:55:10 GMTCVECVE-2022-29184: Command Injection/Argument Injection in GoCDhttps://agentprime.io/advisories/CVE-2022-29184/https://agentprime.io/advisories/CVE-2022-29184/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 May 2022 19:25:14 GMTCVECVE-2022-29183: Reflected XSS in GoCDhttps://agentprime.io/advisories/CVE-2022-29183/https://agentprime.io/advisories/CVE-2022-29183/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 May 2022 19:10:11 GMTCVECVE-2022-29182: DOM-based XSS in GoCDhttps://agentprime.io/advisories/CVE-2022-29182/https://agentprime.io/advisories/CVE-2022-29182/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 May 2022 19:05:12 GMTCVECVE-2022-24832: Bundled ldap-authentication-plugin fails to neutralise LDAP special elements in usernameshttps://agentprime.io/advisories/CVE-2022-24832/https://agentprime.io/advisories/CVE-2022-24832/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Apr 2022 20:20:18 GMTCVECVE-2021-25924: gocd: In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to…https://agentprime.io/advisories/CVE-2021-25924/https://agentprime.io/advisories/CVE-2021-25924/Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Apr 2021 17:58:47 GMTCVE