Stored Cross-site Scripting vulnerability in Jenkins Favorite Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-27196 · ADVISORY
• jenkinsci/favorite-plugin commit 543a4d8 · WEB
• jenkinsci/favorite-plugin · PACKAGE
• jenkins.io/security/advisory/2022-03-15 · WEB
• openwall.com/lists/oss-security/2022/03/15/2 · WEB

Lỗ hổng khác của org.jvnet.hudson.plugins:favorite

• CVE-2017-1000244CAO 8.8Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification
• CVE-2017-1000243TRUNG BÌNH 4.3Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other…