CVE-2024-56321

Summary

CVE-2024-56321 is a vulnerability affecting GoCD versions 18.9.0 to 24.4.0. GoCD is a continuous delivery server, and this issue allows administrators to execute arbitrary scripts on the hosting server or container using the "post-backup script" feature. In most cases, the impact is limited because an admin who can access GoCD's UI usually has host administration permissions. However, in restricted environments where these roles are separated, this may lead to unexpected behavior. GoCD fixed this vulnerability in version 24.5.0 by disabling post-backup scripts in sensitive locations. No workarounds are currently available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.