Description
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites
Remediation
References
https://jenkins.io/security/advisory/2017-06-06/
http://www.securityfocus.com/bid/101946
Related Vulnerabilities
CVE-2023-49803 Vulnerability in maven package org.webjars.npm:koa__cors
CVE-2021-30180 Vulnerability in maven package org.apache.dubbo:dubbo
CVE-2023-41080 Vulnerability in maven package org.apache.tomcat:tomcat
CVE-2023-40343 Vulnerability in maven package io.jenkins.plugins:tuleap-oauth
CVE-2023-24437 Vulnerability in maven package org.jenkins-ci.plugins:jira-steps