Security Advisory
CVE-2017-1000243
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites