Description
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification
Remediation
References
http://www.securityfocus.com/bid/101943
https://jenkins.io/security/advisory/2017-06-06/
Related Vulnerabilities
CVE-2021-35065 Vulnerability in maven package org.webjars.npm:glob-parent
CVE-2019-10280 Vulnerability in maven package org.jenkins-ci.plugins:assembla-auth
CVE-2020-2162 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2016-10623 Vulnerability in npm package macaca-chromedriver-zxa
CVE-2022-33980 Vulnerability in maven package org.apache.commons:commons-configuration2