Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery

2022-05-1401:00:42

Google

osv.dev

0.001 Low

EPSS

Percentile

33.0%

JSON

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification.

CPENameOperatorVersion
org.jvnet.hudson.plugins:favoriteeq2.0.1
org.jvnet.hudson.plugins:favoriteeq1.3
org.jvnet.hudson.plugins:favoriteeq1.7
org.jvnet.hudson.plugins:favoriteeq1.14
org.jvnet.hudson.plugins:favoriteeq2.0
org.jvnet.hudson.plugins:favoriteeq2.0.4
org.jvnet.hudson.plugins:favoriteeq1.16
org.jvnet.hudson.plugins:favoriteeq1.4
org.jvnet.hudson.plugins:favoriteeq2.3.0
org.jvnet.hudson.plugins:favoriteeq1.9

Name	Operator	Version
org.jvnet.hudson.plugins:favorite	eq	2.0.1
org.jvnet.hudson.plugins:favorite	eq	1.3
org.jvnet.hudson.plugins:favorite	eq	1.7
org.jvnet.hudson.plugins:favorite	eq	1.14
org.jvnet.hudson.plugins:favorite	eq	2.0
org.jvnet.hudson.plugins:favorite	eq	2.0.4
org.jvnet.hudson.plugins:favorite	eq	1.16
org.jvnet.hudson.plugins:favorite	eq	1.4
org.jvnet.hudson.plugins:favorite	eq	2.3.0
org.jvnet.hudson.plugins:favorite	eq	1.9