Jenkins Favorite Plugin Design Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...

CloudBees Jenkins Favorite plugin cross-site request forgery vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...

CVE-2017-1000243

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...

CVE-2017-1000244

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2017-1000243

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...

Cross site request forgery (csrf)

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2017-1000244

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2017-1000244

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2017-1000243

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...

CVE-2017-1000244

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2017-1000243

Jenkins Favorite Plugin (up to 2.1.x) contains a permissions check flaw that allows any user to modify another user’s favorites. This is described across multiple sources as a lack of privilege validation when changing favorite status, enabling unauthorized changes via the affected plugin. The vu...

CVE-2017-1000244

CVE-2017-1000244 affects the Jenkins Favorite Plugin (versions

CVE-2017-1000243

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...

CVE-2017-1000243: Missing Authorization

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...

PT-2017-10937

Name of the Vulnerable Software and Affected Versions Jenkins Favorite Plugin versions 2.2.0 and older Description The issue allows for CSRF, resulting in data modification. Recommendations For Jenkins Favorite Plugin versions 2.2.0 and older, update to a version newer than 2.2.0 to resolve the...

CVE-2017-1000244: Cross-Site Request Forgery (CSRF)

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

PT-2017-10936

Name of the Vulnerable Software and Affected Versions Jenkins Favorite Plugin versions 2.1.4 and older Jenkins Favorite Plugin versions up to and including 2.1.0 However, since '2.1.4 and older' already includes 'up to and including 2.1.0', the most concise form is: Jenkins Favorite Plugin versio...

CVE-2017-10271 - Oracle WebLogic Server AsyncResponseService Deserialization Vulnerability

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

jojo.wikia.com XSS vulnerability

Vulnerable URL: http://jojo.wikia.com/wiki/Top10list:FavoriteCharacter?page=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 05.05.2016 Latest check for patch:| 05.05.2016 04:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

FBReader: Favorite Book Reader - Corrupted files, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application FBReader: Favorite Book Reader published at the 'play' market has multiple vulnerabilities...