Vulnerabilities > Woodpecker CI > Woodpecker > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-04-29 CVE-2022-29947 Cross-site Scripting vulnerability in Woodpecker-Ci Woodpecker
Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping.
network
low complexity
woodpecker-ci CWE-79
6.1