org.jenkins-ci.plugins:buildgraph-view (>=1.3.1 <=1.8) potentially affected by CVE-2018-1000114 via org.jenkins-ci.plugins:promoted-builds (=2.17)

org.jenkins-ci.plugins:promoted-builds MAVEN version =2.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:promoted-builds and may be impacted: - org.jenkins-ci.plugins:buildgraph-view =1.3.1, =1.8 Source cves: CVE-2018-1000114...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114

CVE-2018-1000114 affects Jenkins Promoted Builds Plugin 2.31.1 and earlier. The vulnerability arises from improper authorization in Status.java and ManualCondition.java, enabling an attacker who has read access to jobs to perform promotions. Supported by multiple feeds (GHSA, OSV, CNVD, Red Hat, ...