org.jvnet.hudson.plugins:favorite

3 results · Feed

• Medium 5.4
  CVE-2022-27196

  Stored Cross-site Scripting vulnerability in Jenkins Favorite Plugin

  Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure or Item/Create permissions.

  Jenkins Project Jenkins Favorite Plugin org.jvnet.hudson.plugins:favorite Web / CMS Maven
  Mar 15, 2022
• Medium 4.3
  CVE-2017-1000243

  Missing permission check in Jenkins Favorite Plugin

  Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites

  org.jvnet.hudson.plugins:favorite Maven
  Nov 1, 2017
• High 8.8
  CVE-2017-1000244

  Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery

  Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification

  org.jvnet.hudson.plugins:favorite Maven
  Nov 1, 2017