CVE-2023-37960

2023-07-1215:52:59

jenkins

www.cve.org

jenkins

mathworks

polyspace

plugin

security

vulnerability

arbitrary file

sending

permission

EPSS

0.001

Percentile

27.8%

JSON

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "Jenkins MathWorks Polyspace Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "1.0.5",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]