Description
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jvnet.hudson.plugins:favorite | < 2.3.0 | 2.3.0 | GHSA-268v-2qq7-84pf |