exploitDog

CVE-2017-1000244

Опубликовано: 01 нояб. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification

Ссылки

http://www.securityfocus.com/bid/101943
Third Party Advisory
VDB Entry
https://jenkins.io/security/advisory/2017-06-06/
Vendor Advisory
http://www.securityfocus.com/bid/101943
Third Party Advisory
VDB Entry
https://jenkins.io/security/advisory/2017-06-06/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jenkins:favorite:*:*:*:*:*:jenkins:*:*

Версия до 2.2.0 (включая)

EPSS

Процентиль: 55%

0.00832

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2017-1000244

CVSS3: 4.3

redhat

около 9 лет назад

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification

GHSA-jqwh-jrpg-5j3h

CVSS3: 8.8

github

больше 4 лет назад

Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery

EPSS

Процентиль: 55%

0.00832

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352