Description
A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds.
Remediation
References
https://jenkins.io/security/advisory/2018-07-18/#SECURITY-891
https://www.oracle.com/security-alerts/cpuapr2022.html
Related Vulnerabilities
CVE-2022-39266 Vulnerability in npm package isolated-vm
CVE-2022-42890 Vulnerability in maven package org.apache.xmlgraphics:batik-script
CVE-2022-34113 Vulnerability in maven package io.dataease:dataease-plugin-common
CVE-2023-0868 Vulnerability in maven package org.opennms:opennms-webapp
CVE-2023-29203 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates