Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/101943 | vdb entry third party advisory |
https://jenkins.io/security/advisory/2017-06-06/ | vendor advisory |