Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Jenkins MATLAB Plugin — Jenkins Security Advisory 2023-11-29 Clear all filters
TI-2023-27114 CVE-2023-49655 · GHSA-9f5g-rgcr-8grw

Cross-site request forgery in Jenkins MATLAB Plugin

Priority LOW 38

A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00396 Published 2023-11-29 Fixed in 2.11.1 CWE-352
TI-2023-27113 CVE-2023-49654 · GHSA-cv4x-9f34-8rp9

Missing authorization in Jenkins MATLAB Plugin

Priority MEDIUM 43

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00789 Published 2023-11-29 Fixed in 2.11.1 CWE-862