CVE-2023-40349

—

CVSS 3.1

5.3 medium

EPSS

<1%p50

Published

Aug 16, 2023 (Aug 16, 2023)

Modified

Jun 17, 2026

Description

Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs.

Vendors: jenkins
Products: gogs
Weakness: CWE-665
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.