.. / CVE-2021-43287

Exploit for Pre-Auth Takeover of Build Pipelines in GoCD (CVE-2021-43287)

Description:

GoCD contains a critical information disclosure vulnerability whose exploitation allows unauthenticated attackers to leak configuration information including build secrets and encryption keys.

Nuclei Template

View the template here CVE-2021-43287.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-43287.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2021-43287
https://github.com/gocd/gocd/commit/41abc210ac4e8cfa184483c9ff1c0cc04fb3511c
https://twitter.com/wvuuuuuuuuuuuuu/status/1456316586831323140
https://attackerkb.com/assessments/9101a539-4c6e-4638-a2ec-12080b7e3b50
https://www.gocd.org/releases/#21-3-0
https://blog.sonarsource.com/gocd-pre-auth-pipeline-takeover