GoCD is a continuous deliver server. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. This XML External Entity (XXE) vulnerability could allow attackers to read arbitrary files or perform SSRF through XML processing.
XXE
SSRF
Information Disclosure
Path Traversal
Gocd
NVD
GitHub
CVSS 4.0
2.1
EPSS
0.1%
GoCD is a continuous deliver server. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. This XML External Entity (XXE) vulnerability could allow attackers to read arbitrary files or perform SSRF through XML processing.
XXE
Gocd
NVD
GitHub
CVSS 4.0
2.1
EPSS
0.4%
GoCD is a continuous deliver server. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity.
Information Disclosure
Gocd
NVD
GitHub
CVSS 3.1
3.8
EPSS
0.7%