by Kastro
Paper/Archive/CVE-2023-49654

CVE-2023-49654

Jenkins Project Jenkins MATLAB Plugin — Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins…

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 56.2.562 × 2011.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.

Affected

ProductAffectedFixed inSource
Jenkins MATLAB Plugin≤ 2.11.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

advisoryjenkins.io/security/advisory/2023-11-29/#SECURITY-3193refopenwall.com/lists/oss-security/2023/11/29/1