description: A missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository.
affected:
{
defaultStatus: unknown
product: Jenkins TurboScript Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 1.3, status: affected, version: 0, versionType: maven
}