io.jenkins.blueocean:blueocean (>=1.0.0-b12, <=1.1.0-beta-9), io.jenkins.blueocean:blueocean-config (>=1.0.0-b13, <=1.0.1) +9 more potentially affected by CVE-2017-1000243 via org.jvnet.hudson.plugins:favorite (>=2.0, <=2.0.4)

org.jvnet.hudson.plugins:favorite MAVEN version =2.0, =1.0.0-b12, =1.0.0-b13, =1.0.0-b12, =1.0.0-b12, =1.0.0-b15, =1.0.0-b15, =1.0.0-b12, =1.0.0-b12, =0.1-preview-4, =1.0.0-b12, =0.1, =1.0.0 Source cves: CVE-2017-1000243 Source advisory: GHSA-268V-2QQ7-84PF...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0.0-b11), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0.0-b11) +4 more potentially affected by CVE-2017-1000243 via org.jvnet.hudson.plugins:favorite (1.16)

org.jvnet.hudson.plugins:favorite MAVEN version 1.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.plugins:favorite and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-8,...

io.jenkins.blueocean:blueocean (>=1.0.0-b12, <=1.1.0-beta-9), io.jenkins.blueocean:blueocean-config (>=1.0.0-b13, <=1.0.1) +9 more potentially affected by CVE-2017-1000243 via org.jvnet.hudson.plugins:favorite (>=2.0, <=2.0.4)

org.jvnet.hudson.plugins:favorite MAVEN version =2.0, =1.0.0-b12, =1.0.0-b13, =1.0.0-b12, =1.0.0-b12, =1.0.0-b15, =1.0.0-b15, =1.0.0-b12, =1.0.0-b12, =0.1-preview-4, =1.0.0-b12, =0.1, =1.0.0 Source cves: CVE-2017-1000243 Source advisory: OSV:GHSA-268V-2QQ7-84PF...

CVE-2017-1000243

Jenkins Favorite Plugin (up to 2.1.x) contains a permissions check flaw that allows any user to modify another user’s favorites. This is described across multiple sources as a lack of privilege validation when changing favorite status, enabling unauthorized changes via the affected plugin. The vu...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.1.0-beta-9), io.jenkins.blueocean:blueocean-config (>=1.0.0-b13, <=1.0.1) +9 more potentially affected by CVE-2017-1000243 via org.jvnet.hudson.plugins:favorite (>=1.16, <=2.0.4)

org.jvnet.hudson.plugins:favorite MAVEN version =1.16, =1.0-alpha-1, =1.0.0-b13, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-4, =1.0-alpha-1, =0.1, =1.0.0 Source cves: CVE-2017-1000243 Source advisory: MEND:CVE-2017-1000243...