Browse / GoCD

GoCD

See its reports on the map

What gets reported to GoCD

• Cross-site Scripting7
• Information Disclosure3
• Access Control1
• Cross-Site Request Forgery1
• Misconfiguration1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. XSS in new.loading.page.htmlCross-site Scripting (XSS) - Reflected · low
   62 votes
2. XSS in GOCD Analytics PluginCross-site Scripting (XSS) - DOM · medium
   29 votes
3. Open S3 Bucket Accessible by any Aws UserImproper Access Control - Generic
   20 votes
4. XSS In https://docs.gocd.org/current/Cross-site Scripting (XSS) - Generic · low
   14 votes
5. Cross Site ScriptingCross-site Scripting (XSS) - Generic
   9 votes
6. Imperfect CSRF To Overwrite Server Config at /go/admin/restful/configuration/file/POST/xmlCross-Site Request Forgery (CSRF) · medium
   8 votes
7. Reflected XSS vectorCross-site Scripting (XSS) - Generic · medium
   8 votes
8. X-Content-Type-Options header missing at Auth LoginViolation of Secure Design Principles
   7 votes
9. Directory ListeningInformation Disclosure
   7 votes
10. Spring security configuration allows agent sessions to be hijackedImproper Authentication - Generic · high
    6 votes
11. Possible SSRF at URL Parameter while creating a new package repositoryInformation Disclosure
    5 votes
12. XSS in http://localhost:8153/go/admin/config/server/updateCross-site Scripting (XSS) - Generic
    5 votes