CVE-2023-40349 (published 2023-08-16T14:32:57.708Z)
Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs.
Affected products: Vendor: Jenkins Project
Product: Jenkins Gogs Plugin
Versions: 0