Description
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites
Remediation
References
http://www.securityfocus.com/bid/101946
https://jenkins.io/security/advisory/2017-06-06/
Related Vulnerabilities
CVE-2023-28708 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2011-1184 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2017-1000353 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2023-2512 Vulnerability in npm package workerd
CVE-2016-3674 Vulnerability in maven package org.jbehave:jbehave-core