Releases245
Frequency1 week 5 days
Last Release
Stars663
Highly-available version-controlled service configuration repository based on Git, ZooKeeper and HTTP/2

CVE History

CVEPublishedCVSS v3CVSS v2
6.1 MEDIUM

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.

9.3 CRITICAL

Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent authentication bypass.

8.8 HIGH6.5 MEDIUM

Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project.

6.1 MEDIUM4.3 MEDIUM

Cross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.