Lucene search
HistoryNov 29, 2023 - 2:15 p.m.
CVE-2023-49654
cve-2023-49654
jenkins
matlab plugin
xml parsing
vulnerability
permission checks
attackers
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
39.3%
Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.
Affected configurations
Node
jenkinsmatlabRange<2.11.1jenkins
Related
cve
cve
CVE-2023-49654
2023-11-29 14:15:07
prion
prion
Information disclosure
2023-11-29 14:15:00
osv
osv
Jenkins MATLAB Plugin missing permission checks
2023-11-29 15:30:21
cvelist
cvelist
CVE-2023-49654
2023-11-29 13:45:10
github
github
Jenkins MATLAB Plugin missing permission checks
2023-11-29 15:30:21
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-11-29)
2023-11-29 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
39.3%
Related for NVD:CVE-2023-49654