CVE-2023-37960

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems...

CVE-2023-37960

Vulnerability CVE-2023-37960: Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step, allowing attackers with Item/Configure permission to read arbitrary files from the Jenkins controller filesystem.