com.barchart.jenkins:maven-release-cascade (>=1.3.0, <=1.3.2) potentially affected by CVE-2017-1000388 via org.jenkins-ci.plugins:depgraph-view (0.11)

org.jenkins-ci.plugins:depgraph-view MAVEN version 0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:depgraph-view and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.3.0, =1.3.2 Source cves: CVE-2017-1000388...

CVE-2017-1000388

Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data...

CVE-2017-1000388

The CVE-2017-1000388 entry concerns the Jenkins Dependency Graph Viewer plugin (version 0.12 and earlier). The root cause is missing permission checks on the API endpoint that modifies the dependency graph, allowing any user with Overall/Read permission to modify the data. This description is sup...