org.jvnet.hudson.plugins:favorite

2 results · Clear filters · Feed

• Medium 5.4
  CVE-2022-27196

  Stored Cross-site Scripting vulnerability in Jenkins Favorite Plugin

  Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure or Item/Create permissions.

  Jenkins Project Jenkins Favorite Plugin org.jvnet.hudson.plugins:favorite Web / CMS Maven
  Mar 15, 2022
• Medium 4.3
  CVE-2017-1000243

  Missing permission check in Jenkins Favorite Plugin

  Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites

  org.jvnet.hudson.plugins:favorite Maven
  Nov 1, 2017