37 matches found
Cross site scripting
Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure or Item/Create permissions...
CVE-2022-27196
The CVE-2022-27196 entry concerns Jenkins Favorite Plugin (versions up to 2.4.0 and earlier). The vulnerability arises because the plugin does not escape job names in the favorite column, causing stored XSS. This is exploitable by attackers with Item/Configure or Item/Create permissions. Connecte...
PT-2022-18282 · Jenkins · Jenkins Favorite Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Favorite Plugin versions 2.4.0 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the names of jobs in the favorite column are not properly escaped. Attackers with...
Jenkins Favorite Plugin 跨站脚本漏洞
Jenkins and Jenkins Plugin are both products of Jenkins, which is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Configure or Item/Create privileges could be exploited to cause a stored cross-site...
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...
Jenkins Favorite Plugin Design Vulnerability
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...
CloudBees Jenkins Favorite plugin cross-site request forgery vulnerability
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...
Cross site request forgery (csrf)
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000243
Jenkins Favorite Plugin (up to 2.1.x) contains a permissions check flaw that allows any user to modify another user’s favorites. This is described across multiple sources as a lack of privilege validation when changing favorite status, enabling unauthorized changes via the affected plugin. The vu...
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...