GoCD Unauthenticated Takeover

A critical authentication regression in GoCD (introduced in 2018) allows unauthenticated access to addon endpoints (Business Continuity) that can disclose configuration, private encryption keys, and enable remote code execution; Censys found 458 hosts/592 internet-facing services potentially affected and administrators are urged to upgrade to GoCD 21.3.0 immediately.