Stored Cross-site Scripting vulnerability in Jenkins Favorite Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-27196 · ADVISORY
• jenkinsci/favorite-plugin commit 543a4d8 · WEB
• jenkinsci/favorite-plugin · PACKAGE
• jenkins.io/security/advisory/2022-03-15 · WEB
• openwall.com/lists/oss-security/2022/03/15/2 · WEB

org.jvnet.hudson.plugins:favorite のその他の脆弱性

• CVE-2017-1000244高 8.8Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification
• CVE-2017-1000243中 4.3Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other…