Description
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jvnet.hudson.plugins:favorite | < 2.3.2 | 2.3.2 | GHSA-jqwh-jrpg-5j3h |
High · 8.8
CVE-2017-1000244
EUVD-2022-4419GHSA-jqwh-jrpg-5j3h
Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery
Published Nov 1, 2017 · Updated Aug 5, 2024 · Assigned by mitre