description: A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter.
affected:
{
defaultStatus: unknown
product: Jenkins Fogbugz Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 2.2.17, status: affected, version: 0, versionType: maven
}