Browse / GoCD

GoCD

See its reports on the map

What gets reported to GoCD

• Cross-site Scripting7
• Information Disclosure3
• Access Control1
• Cross-Site Request Forgery1
• Misconfiguration1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. XSS in new.loading.page.htmlCross-site Scripting (XSS) - Reflected · low
   62 votes
2. Information Disclosure via Logback Configuration Injection in GoCD AgentInformativeInformation Disclosure
   37 votes
3. XSS in GOCD Analytics PluginCross-site Scripting (XSS) - DOM · medium
   29 votes
4. Open S3 Bucket Accessible by any Aws UserImproper Access Control - Generic
   20 votes
5. XSS In https://docs.gocd.org/current/Cross-site Scripting (XSS) - Generic · low
   14 votes
6. Cross Site ScriptingCross-site Scripting (XSS) - Generic
   9 votes
7. Imperfect CSRF To Overwrite Server Config at /go/admin/restful/configuration/file/POST/xmlCross-Site Request Forgery (CSRF) · medium
   8 votes
8. Reflected XSS vectorCross-site Scripting (XSS) - Generic · medium
   8 votes
9. X-Content-Type-Options header missing at Auth LoginViolation of Secure Design Principles
   7 votes
10. Directory ListeningInformation Disclosure
    7 votes
11. Spring security configuration allows agent sessions to be hijackedImproper Authentication - Generic · high
    6 votes
12. Possible SSRF at URL Parameter while creating a new package repositoryInformation Disclosure
    5 votes
13. XSS in http://localhost:8153/go/admin/config/server/updateCross-site Scripting (XSS) - Generic
    5 votes
14. Reflected XSSDuplicateCross-site Scripting (XSS) - Generic
    3 votes