EUVD-2022-4419

Malicious code in bioql PyPI...

GHSA-JQWH-JRPG-5J3H Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2022-27196

Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure or Item/Create permissions...

CVE-2022-27196

Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure or Item/Create permissions...

CVE-2022-27196: Improper Neutralization of Input During Web Page Generation

Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure or Item/Create permissions...

Jenkins Favorite Plugin Design Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...

CVE-2017-1000244

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2017-1000244

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2017-1000244

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2017-1000243

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...

CVE-2017-1000243: Missing Authorization

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites...

PT-2017-10937

Name of the Vulnerable Software and Affected Versions Jenkins Favorite Plugin versions 2.2.0 and older Description The issue allows for CSRF, resulting in data modification. Recommendations For Jenkins Favorite Plugin versions 2.2.0 and older, update to a version newer than 2.2.0 to resolve the...

CVE-2017-1000244: Cross-Site Request Forgery (CSRF)

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

PT-2017-10936

Name of the Vulnerable Software and Affected Versions Jenkins Favorite Plugin versions 2.1.4 and older Jenkins Favorite Plugin versions up to and including 2.1.0 However, since '2.1.4 and older' already includes 'up to and including 2.1.0', the most concise form is: Jenkins Favorite Plugin versio...