Favorite Security Vulnerabilities and Issues — Favorite CVE List

Lucene search

JenkinsFavorite

2 matches found

CVE•added 2022/03/15 5:15 p.m.•125 views

CVE-2022-27196

Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure or Item/Create permissions.

5.4CVSS5.3AI score0.19967EPSS

CVE•added 2017/11/01 1:29 p.m.•55 views

CVE-2017-1000244

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification

8.8CVSS8.6AI score0.00059EPSS