The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output.
| Software | From | Fixed in |
|---|---|---|
org.jenkins-ci.plugins / gogs-webhook
|
- | 1.0.15.x |
| jenkins / gogs | - | 1.0.15.x |