Jenkins Job and Node ownership Plugin授权问题漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Job and Node ownership Plugin 0.13.0 and earlier versions are vulnerable to an authorization issue that stems from the plugin not performing permission checks across multiple HTTP endpoints. An attacker with project/read permissions could exploit this vulnerability to change the owner of a job and project-specific permissions.