CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVE-2023-40349
Medium (5.3) in jenkins gogs. EPSS 0.7% chance of exploitation in the next 30 days.
Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- CWE
- CWE-665
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:gogs
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-rc33-44qp-vpvq | Maven | org.jenkins-ci.plugins:gogs-webhook | <=1.0.15 | no fix published |