GHSA-9rx5-w522-5fh7
Jenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processes
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jenkins-ci.plugins:promoted-builds | < 3.0 | 3.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.
References
External links from the advisory. They lead to third-party sites.