Jenkins Failed Job Deactivator Plugin授权问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins Failed Job Deactivator Plugin version 1.2.1 and prior versions are vulnerable to an authorization issue that stems from not performing permission checks across multiple views and HTTP endpoints, which can be exploited by an attacker with overall/read access to disable the job.