Description
A cross-site request forgery (CSRF) vulnerability in Jenkins Favorite View Plugin 5.v77a_37f62782d and earlier allows attackers to add or remove views from another user's favorite views tab bar.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins Project | Jenkins Favorite View Plugin | ≤ 5.v77a_37f62782d | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:favorite-view | <= 5.v77a | — | GHSA-jrj6-qx48-3cpq |
Advisories 1
- WID-SEC-2023-2088 Jenkins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 11, 2024