En resumen
- CVE-2017-1000243 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a org.jvnet.hudson.plugins:favorite, favorite plugin (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.64%, mayor que el 50.6% de las vulnerabilidades.
- Solución: actualizar a 2.3.0 o posterior.
Description
Jenkins Favorite Plugin up to and including 2.1.0 does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites
NVD description
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites
Más vulnerabilidades de org.jvnet.hudson.plugins:favorite
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free