Junglewise Threat Intelligence

CVE-2023-40034: GO-2023-2014 - Woodpecker does not validate webhook before changing any data in github.com/woodpecker-ci/woodpecker

CVE-2023-40034 · Severity: low · CVSS 3.1 · Published 2024-08-21

Technologies: github.com/woodpecker-ci/woodpecker (Go). Vendors: Go.

Executive brief

Woodpecker does not validate webhook before changing any data in github.com/woodpecker-ci/woodpecker

Affected products

  • Go github.com/woodpecker-ci/woodpecker

Related threats