CVE-2017-1000243: Missing Authorization

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...

PT-2017-10937

Name of the Vulnerable Software and Affected Versions Jenkins Favorite Plugin versions 2.2.0 and older Description The issue allows for CSRF, resulting in data modification. Recommendations For Jenkins Favorite Plugin versions 2.2.0 and older, update to a version newer than 2.2.0 to resolve the...