CVE-2017-1000243
jenkins-plugin-favorite: Missing permission check in Favorite Plugin allows anyone to change favorites for any other user
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites
CVSS 3.0 · 4.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products