Jenkins MATLAB Plugin missing permission checks

🗓️ 29 Nov 2023 15:21:30Reported by GitHub Advisory DatabaseType

Jenkins MATLAB Plugin lacks permission checks, exposes CSRF and XXE vulnerabilitie

Reporter	Title	Published	Views	Family All 6
CVE	CVE-2023-49654	29 Nov 202314:15	–	cve
OSV	Jenkins MATLAB Plugin missing permission checks	29 Nov 202315:30	–	osv
NVD	CVE-2023-49654	29 Nov 202314:15	–	nvd
Prion	Information disclosure	29 Nov 202314:15	–	prion
Cvelist	CVE-2023-49654	29 Nov 202313:45	–	cvelist
Tenable Nessus	Jenkins plugins Multiple Vulnerabilities (2023-11-29)	29 Nov 202300:00	–	nessus

Vulners

Node

org.jenkins-ci.plugins matlabRange<2.11.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-49654
jenkins	www.jenkins.io/security/advisory/2023-11-29/
openwall	www.openwall.com/lists/oss-security/2023/11/29/1
github	www.github.com/advisories/GHSA-cv4x-9f34-8rp9

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Nov 2023 15:30Current

7.0High risk

Vulners AI Score7.0

EPSS0.002

CWE-862