Description
A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows attackers to stop tracking a resource.
Remediation
References
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-997
Related Vulnerabilities
CVE-2016-0750 Vulnerability in maven package org.infinispan:infinispan-client-hotrod
CVE-2010-1330 Vulnerability in maven package org.jruby:jruby
CVE-2023-50764 Vulnerability in maven package org.jenkins-ci.plugins:scriptler
CVE-2023-50732 Vulnerability in maven package org.xwiki.platform:xwiki-platform-index-tree-macro
CVE-2023-24435 Vulnerability in maven package org.jenkins-ci.plugins:ghprb