CVE Catalog
CVE-2023-40348
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.55%
41th percentile - higher than 41% of all known CVEs
Summary
The webhook endpoint in Jenkins Gogs Plugin version 1.0.15 and earlier exposes unauthenticated attackers to information about the existence of jobs in its output.
Risk Assessment
Attackers may exploit this vulnerability to gain insights into the structure and available jobs in Jenkins, potentially leading to further attacks.
Recommendation
It is recommended to update the Gogs plugin to the latest version to mitigate the risk associated with information disclosure.
Original NVD description (English source)
The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output.