0.001 Low
EPSS
Percentile
21.7%
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user’s favorites
bugzilla.redhat.com/show_bug.cgi?id=1565688
jenkins.io/security/advisory/2017-06-06/