34 matches found
PT-2022-18282 · Jenkins · Jenkins Favorite Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Favorite Plugin versions 2.4.0 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the names of jobs in the favorite column are not properly escaped. Attackers with...
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...
Jenkins Favorite Plugin Design Vulnerability
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...
CloudBees Jenkins Favorite plugin cross-site request forgery vulnerability
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...
Cross site request forgery (csrf)
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...
CVE-2017-1000244
CVE-2017-1000244 affects the Jenkins Favorite Plugin (versions
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
CVE-2017-1000243
Jenkins Favorite Plugin (up to 2.1.x) contains a permissions check flaw that allows any user to modify another user’s favorites. This is described across multiple sources as a lack of privilege validation when changing favorite status, enabling unauthorized changes via the affected plugin. The vu...