CVE-2021-43286

An issue was discovered in ThoughtWorks GoCD before 21.3.0

published April 14, 2022

CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker with privileges to create a new pipeline on a GoCD server can abuse a command-line injection in the Git URL "Test Connection" feature to execute arbitrary code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02898 · 86.8th percentile
Published
2022-04-14T12:55Z
EPSS history
Timeline
  • 14 APR 12:55Z
    An issue was discovered in ThoughtWorks GoCD before 21.3.0
    cvelistv5