writeups.xyz / Agent 007: Pre-Auth Takeover of Build Pipelines in GoCD

Submitter : c2a

Date: 27 October 2021

Bounty : undisclosed

Vulnerabilities :

• Broken Authentication

Programs :

• GoCD

Authors :

• Sonar (@SonarSource)

Link :
https://blog.sonarsource.com/gocd-pre-auth-pipeline-takeover